--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38b4dc3717d3c07ec86a9d4729f7730afc1473a29b2ceb7ccd27b20d39d9adc"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a1743788333c37c39d88c4807c71f330e6a90432b3fd500d41c95da1c75f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2be8b54811a14b5e3e657465d6e30c7f615323bbe622e9c43c926de118ce1453"}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a1743788333c37c39d88c4807c71f330e6a90432b3fd500d41c95da1c75f1"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb"}
{"level":"debug","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"}
{"level":"info","ts":"2026-07-07T00:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"}
{"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50328","PortSpecifier":{"PortValue":50328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50328","PortSpecifier":{"PortValue":50328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383534,"nanos":365441633},"http":{"id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","method":"POST","headers":{":authority":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e69f0c24cca91f1401b6ebf30a61936ca1e204b1010888f597498766de72add"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-30509d/test-model-30509d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:18:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cd43e15-3b78-460c-9503-98f5d1bed6f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50340","PortSpecifier":{"PortValue":50340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","method":"POST","path":"/ai-tenant-e2e-inf-a-30509d/test-model-30509d/v1/chat/completions","host":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50340","PortSpecifier":{"PortValue":50340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383538,"nanos":432195781},"http":{"id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","method":"POST","headers":{":authority":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-30509d/test-model-30509d/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ak620ibNszYfcmgw_ZCNS5YnVsrCsD3wRydGXn8BbntQwUQv8lwU7Y7tDxEP"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-30509d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ak620ibNszYfcmgw_ZCNS5YnVsrCsD3wRydGXn8BbntQwUQv8lwU7Y7tDxEP\"}"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-30509d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bbed073d-4506-40a2-923b-d85c9954fa8a","keyName":"e2e-tenant-inference-30509d","subscription":"test-model-30509d-sub","tenant":"e2e-inf-a-30509d","userId":"bbed073d-4506-40a2-923b-d85c9954fa8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-30509d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-30509d/test-model-30509d\",\"requestedSubscription\":\"test-model-30509d-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-30509d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-30509d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-30509d-sub","namespace":"ai-tenant-e2e-inf-a-30509d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-30509d/test-model-30509d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-30509d-sub"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bbed073d-4506-40a2-923b-d85c9954fa8a","keyName":"e2e-tenant-inference-30509d","selected_subscription":"test-model-30509d-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-30509d/test-model-30509d-sub@ai-tenant-e2e-inf-a-30509d/test-model-30509d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-30509d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-30509d-sub","namespace":"ai-tenant-e2e-inf-a-30509d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0931368d-eb0e-42f0-b7af-29e5fcce6a10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50354","PortSpecifier":{"PortValue":50354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50354","PortSpecifier":{"PortValue":50354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383538,"nanos":740973556},"http":{"id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","method":"POST","headers":{":authority":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3e69f0c24cca91f1401b6ebf30a61936ca1e204b1010888f597498766de72add"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-30509d.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-30509d/test-model-30509d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfd7d5f-2e00-45ec-8542-8a2caf4bdd1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55916","PortSpecifier":{"PortValue":55916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a53ed01-067c-4a0b-9272-8930cc842b96","method":"POST","path":"/ai-tenant-e2e-inf-b-408dd6/test-model-408dd6/v1/chat/completions","host":"e2e-inf-b-408dd6.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55916","PortSpecifier":{"PortValue":55916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383538,"nanos":787637117},"http":{"id":"7a53ed01-067c-4a0b-9272-8930cc842b96","method":"POST","headers":{":authority":"e2e-inf-b-408dd6.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-408dd6/test-model-408dd6/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-n01q8FxTkYRHVTTA_MNNBK6cO271JSXJNdTnrHIerTpiSDHXn96S7nzN3QA4"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-408dd6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-n01q8FxTkYRHVTTA_MNNBK6cO271JSXJNdTnrHIerTpiSDHXn96S7nzN3QA4\"}"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-408dd6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-408dd6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"db0af914fb1a61f1b1b684a2390deb8a81127146aec838a9775ce44426eda035"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-408dd6.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-408dd6/test-model-408dd6/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:18:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a53ed01-067c-4a0b-9272-8930cc842b96","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91cb1a8e2320055741025c66820f2a62315175b42b9273322b6ab968538be49a"}
{"level":"info","ts":"2026-07-07T00:19:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015067272c7bed483aeaa89f13b7ffc1fb3599a340accbed6fa9d7df372e12b4"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/577f33d75b042c778ca1724ce509ec05afe67daab32c9bd8bcddbdea49164af8"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc288d5798a0760a8948c55b4535dbe93513711bbd37d52fb294ed79dee8ecbb"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ac802d59e421e110830e9a573e39a59664573cffb7eb8d7c2566cc3a5d6ee6b"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fecb60bdbbfc54a4ab78984b5347b397db74fe769997fdfc4cf2268ec715777"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/232a1743788333c37c39d88c4807c71f330e6a90432b3fd500d41c95da1c75f1"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c162101784a7eaeb52124b4ad1979b06fc98d640b6eedaa2d515d36a2c651bf6"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7dda803cfba66809eb5113fcc6cf83498d4b71a481f123d4ee1ea1a79eea64"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5ea217e282157f6042c5fa570485ebd9b7cc8b4a48a42bca27aede6ccde0bc4"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db0af914fb1a61f1b1b684a2390deb8a81127146aec838a9775ce44426eda035"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e38b4dc3717d3c07ec86a9d4729f7730afc1473a29b2ceb7ccd27b20d39d9adc"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc0458461ef533d7b6a9c1f6ad65cc890f640a071ea2a2cbde83a0665c98a424"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9f0ea0c552c0d130816c5f1969cd9e62c4b4e90ffee172d5533bbe9da156410"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/511b99920c724925071c74f638f7c80f51c11643fc8cc1b98fe1260581e0b7b4"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfffc06596d8fab43e29fcb300dfea9f5ed9486584b3b74601155d2f79563f84"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e69f0c24cca91f1401b6ebf30a61936ca1e204b1010888f597498766de72add"}
{"level":"info","ts":"2026-07-07T00:19:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f25a55c97b9dc2f6b6747a32da899deb1645e4378b7640e6b8660a5defa65430"}
{"level":"info","ts":"2026-07-07T00:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8946a335170c6bbb95b3bd806d575dd46e98da02650cffa07d78dbe89625831"}
{"level":"info","ts":"2026-07-07T00:19:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2be8b54811a14b5e3e657465d6e30c7f615323bbe622e9c43c926de118ce1453"}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216"}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"}
{"level":"info","ts":"2026-07-07T00:20:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:20:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"}
{"level":"info","ts":"2026-07-07T00:20:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/312a12f6206c43895a44faf7efbd359ca7d6fc6e49942a576b771382050bf216"}
{"level":"info","ts":"2026-07-07T00:20:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/091fd292b666483f5c22b4cb4f34130286f5c46922a52c47a40096d26565f04b"}
{"level":"info","ts":"2026-07-07T00:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/294ae12a8048bb4d724f68d696919580528f0ca4153775977d8ed5f8366eeffe"}
{"level":"info","ts":"2026-07-07T00:20:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28fd415f173c6cf86dc66993f0087c23cf2a3ce2111040bfa4b46e7c051ed7e3"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"error","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624"}
{"level":"info","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624"}
{"level":"error","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663"}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"error","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"}
{"level":"error","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"debug","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"error","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064"}
{"level":"error","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49"}
{"level":"info","ts":"2026-07-07T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38814","PortSpecifier":{"PortValue":38814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38814","PortSpecifier":{"PortValue":38814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383711,"nanos":731664738},"http":{"id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7df4858-9e64-42e1-bbf6-5721509cf22c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383711,"nanos":793605598},"http":{"id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d814ecd6-6ef9-9581-83c4-5bed3b6d0275","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38820","PortSpecifier":{"PortValue":38820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e462765-6d5b-4480-b1f4-86717a9339f9","method":"GET","path":"/maas-api/v1/api-keys/7e97ef89-b861-4e7f-9ba7-8058cc1596f5","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38820","PortSpecifier":{"PortValue":38820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383711,"nanos":877862978},"http":{"id":"7e462765-6d5b-4480-b1f4-86717a9339f9","method":"GET","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e97ef89-b861-4e7f-9ba7-8058cc1596f5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e97ef89-b861-4e7f-9ba7-8058cc1596f5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e462765-6d5b-4480-b1f4-86717a9339f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40192","PortSpecifier":{"PortValue":40192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","method":"GET","path":"/maas-api/v1/api-keys/7027f168-7e28-4c95-8745-db6de74a3bc3","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40192","PortSpecifier":{"PortValue":40192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383711,"nanos":910331685},"http":{"id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","method":"GET","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7027f168-7e28-4c95-8745-db6de74a3bc3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7027f168-7e28-4c95-8745-db6de74a3bc3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"508efc0a-4ab6-4b92-ab57-a56a652089bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44988","PortSpecifier":{"PortValue":44988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44988","PortSpecifier":{"PortValue":44988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383728,"nanos":990919770},"http":{"id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b95c6fc-a6b8-44c7-b14a-0d49e5db9b96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33808","PortSpecifier":{"PortValue":33808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:33808","PortSpecifier":{"PortValue":33808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383729,"nanos":33309688},"http":{"id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18fa66b4-aba2-4809-94ca-12ccb54b273c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45004","PortSpecifier":{"PortValue":45004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45004","PortSpecifier":{"PortValue":45004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383729,"nanos":81862673},"http":{"id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","method":"GET","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSjCxdWkuDLeNiHl_xyOCEp9ULG8kjbZFt9FtSRYuPp3Bus2TZsW7ep15HHD"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSjCxdWkuDLeNiHl_xyOCEp9ULG8kjbZFt9FtSRYuPp3Bus2TZsW7ep15HHD\"}"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbcd6839-97fa-45ea-95d4-f2423f2a118e","keyName":"e2e-auth-iso-a-e5949b","subscription":"e2e-auth-iso-b1623b","tenant":"e2e-shared-a-b60cd9","userId":"dbcd6839-97fa-45ea-95d4-f2423f2a118e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b1623b"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3ca6b7b-7c09-4af6-9c1c-2a508afd6c82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49086","PortSpecifier":{"PortValue":49086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49086","PortSpecifier":{"PortValue":49086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383746,"nanos":170448461},"http":{"id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25afebff-3cde-4c9b-aab8-e376fc15d2f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55180","PortSpecifier":{"PortValue":55180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55180","PortSpecifier":{"PortValue":55180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383746,"nanos":210586530},"http":{"id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78eeaec9-f3e2-41f1-bb32-6ff6f95301a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55190","PortSpecifier":{"PortValue":55190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55190","PortSpecifier":{"PortValue":55190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383746,"nanos":250738204},"http":{"id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","method":"GET","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ACXXtGte4C9YioIx_oVxZfLYscoGig1mv465b4gQsd9B02F8UR8temHmE16d"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ACXXtGte4C9YioIx_oVxZfLYscoGig1mv465b4gQsd9B02F8UR8temHmE16d\"}"}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:22:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8e449ad-d8a0-4101-b41d-6e715ae785b4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35016","PortSpecifier":{"PortValue":35016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35016","PortSpecifier":{"PortValue":35016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383768,"nanos":505494781},"http":{"id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de71a692-96a3-4fe6-ae00-c7fd6f1324e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83505681-a7c0-40b4-9696-e644ee799362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40840","PortSpecifier":{"PortValue":40840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83505681-a7c0-40b4-9696-e644ee799362","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83505681-a7c0-40b4-9696-e644ee799362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40840","PortSpecifier":{"PortValue":40840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383768,"nanos":541102965},"http":{"id":"83505681-a7c0-40b4-9696-e644ee799362","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83505681-a7c0-40b4-9696-e644ee799362","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83505681-a7c0-40b4-9696-e644ee799362","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83505681-a7c0-40b4-9696-e644ee799362","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83505681-a7c0-40b4-9696-e644ee799362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83505681-a7c0-40b4-9696-e644ee799362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83505681-a7c0-40b4-9696-e644ee799362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83505681-a7c0-40b4-9696-e644ee799362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83505681-a7c0-40b4-9696-e644ee799362","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83505681-a7c0-40b4-9696-e644ee799362","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83505681-a7c0-40b4-9696-e644ee799362","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83505681-a7c0-40b4-9696-e644ee799362","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35030","PortSpecifier":{"PortValue":35030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35030","PortSpecifier":{"PortValue":35030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383768,"nanos":578591278},"http":{"id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"380a5c7c-d35c-42b3-b0f7-a5cce1f11729","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"246d2d94-703a-4688-b530-cc39361a6e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40856","PortSpecifier":{"PortValue":40856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"246d2d94-703a-4688-b530-cc39361a6e85","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"246d2d94-703a-4688-b530-cc39361a6e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40856","PortSpecifier":{"PortValue":40856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383768,"nanos":618358597},"http":{"id":"246d2d94-703a-4688-b530-cc39361a6e85","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"246d2d94-703a-4688-b530-cc39361a6e85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"246d2d94-703a-4688-b530-cc39361a6e85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"246d2d94-703a-4688-b530-cc39361a6e85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246d2d94-703a-4688-b530-cc39361a6e85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246d2d94-703a-4688-b530-cc39361a6e85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246d2d94-703a-4688-b530-cc39361a6e85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"246d2d94-703a-4688-b530-cc39361a6e85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246d2d94-703a-4688-b530-cc39361a6e85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246d2d94-703a-4688-b530-cc39361a6e85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"246d2d94-703a-4688-b530-cc39361a6e85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:22:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"246d2d94-703a-4688-b530-cc39361a6e85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46538","PortSpecifier":{"PortValue":46538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46538","PortSpecifier":{"PortValue":46538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383786,"nanos":720977430},"http":{"id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec217f7-4ba6-4913-8de9-b02ad276a51c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36034","PortSpecifier":{"PortValue":36034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36034","PortSpecifier":{"PortValue":36034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383786,"nanos":757259561},"http":{"id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ab3dd88-9a38-4927-9efb-09c2ffe20ac2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36048","PortSpecifier":{"PortValue":36048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8397c79-39ff-4ad7-8536-233c59e105df","method":"GET","path":"/maas-api/v1/api-keys/eab8e034-9546-41a1-84f0-89f4dd61536c","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36048","PortSpecifier":{"PortValue":36048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383786,"nanos":797906628},"http":{"id":"f8397c79-39ff-4ad7-8536-233c59e105df","method":"GET","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eab8e034-9546-41a1-84f0-89f4dd61536c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eab8e034-9546-41a1-84f0-89f4dd61536c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8397c79-39ff-4ad7-8536-233c59e105df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46546","PortSpecifier":{"PortValue":46546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","method":"GET","path":"/maas-api/v1/api-keys/eab8e034-9546-41a1-84f0-89f4dd61536c","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46546","PortSpecifier":{"PortValue":46546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383786,"nanos":831090486},"http":{"id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","method":"GET","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eab8e034-9546-41a1-84f0-89f4dd61536c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eab8e034-9546-41a1-84f0-89f4dd61536c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:23:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c632a1-f7ec-4167-8e02-050a89eaa93d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37572","PortSpecifier":{"PortValue":37572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a73539d-8790-47dc-8237-7d7204b758b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37572","PortSpecifier":{"PortValue":37572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383801,"nanos":864940538},"http":{"id":"0a73539d-8790-47dc-8237-7d7204b758b0","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a73539d-8790-47dc-8237-7d7204b758b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34574","PortSpecifier":{"PortValue":34574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34574","PortSpecifier":{"PortValue":34574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383801,"nanos":903727523},"http":{"id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/auth-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d799c97f-1b5c-9a4b-80f9-1687f0384313","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37584","PortSpecifier":{"PortValue":37584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37584","PortSpecifier":{"PortValue":37584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383801,"nanos":941451407},"http":{"id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t7BcKLdqje6YVgN5_Zmlg5POahSULtn6GIeqa65R6yXL5xwcZJG1mxT7iCEU"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t7BcKLdqje6YVgN5_Zmlg5POahSULtn6GIeqa65R6yXL5xwcZJG1mxT7iCEU\"}"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4358bf88-82d1-49d9-a4a0-0b9feab31520","keyName":"e2e-auth-iso-a-4fc186","subscription":"e2e-auth-iso-89be8b","tenant":"e2e-shared-a-b60cd9","userId":"4358bf88-82d1-49d9-a4a0-0b9feab31520","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/auth-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-89be8b"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:23:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb72eb0c-8d79-47f6-af60-3b6217bed9db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/337cccf16d1c075a74cd83abaa4fef572939c20e27da3db76678ccc9a1e6ac99"}
{"level":"info","ts":"2026-07-07T00:23:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b39b21ca8a520179fe44468a6bdff92af35cee3b73d5776cd181e4f6443d8e0"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd1a85e8119659708afdecc45233a436a0efe66a2043bbfe43b2f66e534c9718"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65fd5cf342483714c5f02d9d466b742ac2e008cd6fefc66a90f7981d8317c064"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43a71f42b7f9adb047cbe9621a19ca5c9343bb921b2cb7c16563f94469768778"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66f9c041fecc45eaaaeb8ad1981c622c342857d5b7750933204d2fb8fbdc318e"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c777d02e772df28acd2b5d3118ad8b62cb08349c1b25f875d044e7f9403dd2cb"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4667b58c8614d43f57dffabb8541a1ac920d4e131aa1b5d3d4ae667b30c1bb49"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/067c4002b32724b33247ca953e354b3f18c1503e5cc555b4ab3bcdae0b678409"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3680ddc8bd029677ca35285a7b92b61fa39d1e9fa528e191a460db7f6af72624"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cf29786d0997cc1396ff51e35e0184eed3ec6e2d00f42ea25ccf42a1af0775f"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/345b45b22d78205fbb7392d7ca91a5f53b28f772e5dd19e5f34fe2fbe8d8f663"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a4edaa297b68bc7d4531ff30c28394e37cdcabec0cf4fc3450e77f3b200cc1e"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d763ed552cb58a57b76db001e3f8660d72e8d076e31ac413170b8e6ad6ebfaba"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7062576e4f14acb9f45523a00edf47c18ddcb9be19941e8dae45602a60f7f3c"}
{"level":"info","ts":"2026-07-07T00:23:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e62b12154388b4539b7ebefc5e9039805a5e1bba5a92ec25b87a7e2184cddd8"}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89"}
{"level":"info","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29"}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:23:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e"}
{"level":"info","ts":"2026-07-07T00:23:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495"}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495"}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"error","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5"}
{"level":"error","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"}
{"level":"info","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"debug","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29"}
{"level":"info","ts":"2026-07-07T00:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47882","PortSpecifier":{"PortValue":47882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb41cca5-6eca-420a-8548-162a7d38efa6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47882","PortSpecifier":{"PortValue":47882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383883,"nanos":136094504},"http":{"id":"eb41cca5-6eca-420a-8548-162a7d38efa6","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/sub-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb41cca5-6eca-420a-8548-162a7d38efa6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48360","PortSpecifier":{"PortValue":48360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9744c637-2c7c-477c-8ac4-546ecc498641","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48360","PortSpecifier":{"PortValue":48360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383883,"nanos":176687506},"http":{"id":"9744c637-2c7c-477c-8ac4-546ecc498641","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/sub-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9744c637-2c7c-477c-8ac4-546ecc498641","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74475201-1fb1-40b3-8539-0426e937867c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47890","PortSpecifier":{"PortValue":47890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74475201-1fb1-40b3-8539-0426e937867c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74475201-1fb1-40b3-8539-0426e937867c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47890","PortSpecifier":{"PortValue":47890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383883,"nanos":217002145},"http":{"id":"74475201-1fb1-40b3-8539-0426e937867c","method":"GET","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LEmsr5i8IzrQiwwJ_QxAR7GSaWa4QUC9c7eBmQTHKjPVo6memRUxdVVOe12A"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LEmsr5i8IzrQiwwJ_QxAR7GSaWa4QUC9c7eBmQTHKjPVo6memRUxdVVOe12A\"}"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ceefeb20-839c-4220-bfa0-16da97190363","keyName":"e2e-sub-iso-aeb484","subscription":"e2e-a-only-11b0d5","tenant":"e2e-shared-a-b60cd9","userId":"ceefeb20-839c-4220-bfa0-16da97190363","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74475201-1fb1-40b3-8539-0426e937867c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/sub-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-11b0d5"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74475201-1fb1-40b3-8539-0426e937867c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74475201-1fb1-40b3-8539-0426e937867c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74475201-1fb1-40b3-8539-0426e937867c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48374","PortSpecifier":{"PortValue":48374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48374","PortSpecifier":{"PortValue":48374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383883,"nanos":257683162},"http":{"id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","method":"GET","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YU3dFc4taDO7c0iJ_dMLSpfpkrB0WrNjB9oBeT24LxrnDsav3VEzb8kKYhCK"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YU3dFc4taDO7c0iJ_dMLSpfpkrB0WrNjB9oBeT24LxrnDsav3VEzb8kKYhCK\"}"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ed47d12-69b3-4110-9007-cd644efce614","keyName":"e2e-sub-iso-b28ec8","subscription":"e2e-b-only-11b0d5","tenant":"e2e-shared-b-c6e67e","userId":"6ed47d12-69b3-4110-9007-cd644efce614","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/sub-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-11b0d5"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e384b1-db5f-4a8c-889c-6e8484ee4379","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48900","PortSpecifier":{"PortValue":48900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48900","PortSpecifier":{"PortValue":48900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383899,"nanos":539647526},"http":{"id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/sub-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"030bb6ac-3ad2-430f-bbdc-cb26454f0290","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40122","PortSpecifier":{"PortValue":40122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0451b9d-59a0-4e21-b9b8-374829189070","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40122","PortSpecifier":{"PortValue":40122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383899,"nanos":590987694},"http":{"id":"f0451b9d-59a0-4e21-b9b8-374829189070","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/sub-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0451b9d-59a0-4e21-b9b8-374829189070","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48902","PortSpecifier":{"PortValue":48902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48902","PortSpecifier":{"PortValue":48902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383899,"nanos":629456647},"http":{"id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jfMbsWyNg7g1opDZ_irTkIdykn8ZQmepKggnmXx44smaIAgh9VvB0tbMkGgd"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jfMbsWyNg7g1opDZ_irTkIdykn8ZQmepKggnmXx44smaIAgh9VvB0tbMkGgd\"}"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"950c3591-1bae-4648-8e29-e5a54ffd5a6d","keyName":"e2e-sub-iso-a9bf93","subscription":"e2e-shared-sub-5110d8","tenant":"e2e-shared-a-b60cd9","userId":"950c3591-1bae-4648-8e29-e5a54ffd5a6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/sub-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5110d8"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d550b2c6-0c5b-408b-b5e1-b77d3ab202a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40126","PortSpecifier":{"PortValue":40126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40126","PortSpecifier":{"PortValue":40126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383899,"nanos":662329272},"http":{"id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ObIKVoWTQeDETixL_YfEHrtMrmag1hZR31e10iCRKDYstAmRB284OMOEk61b"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ObIKVoWTQeDETixL_YfEHrtMrmag1hZR31e10iCRKDYstAmRB284OMOEk61b\"}"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32492cc2-4528-4193-aebd-eaa388727ce8","keyName":"e2e-sub-iso-c669fe","subscription":"e2e-shared-sub-5110d8","tenant":"e2e-shared-b-c6e67e","userId":"32492cc2-4528-4193-aebd-eaa388727ce8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/sub-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5110d8"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64025cb4-3ec5-42e5-a070-fda3ed663de3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d402e6a312dcee75021512aecd6fe204693e618f8a16a91962c402a6d7ef7a5e"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99e4abab9bdf10202b9237b02c6fcbbcf7c61f641f2b4e65ee26f83b841edf0e"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f57d9ca2d9311c436c57d738dd1a2f10f1181229feb19daa2123a714d30ab7bb"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3af3b5b89206d89fde035df8ed9febb95091f7902e528c3e03c7968cde37e89"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14062b96cb27d6b1157ec06d08bdf860339113d4c72dd382b9602dca27cabb1e"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d68c53edd33cdf0b2953eb3a01c410e4d5ce8911f8c51303f079aa60a7b9d49a"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dcbcf1a7d8ba7e2bc8f7106ca28bcb9e9e4822a72dfee5a73ee5000d5ff30b1"}
{"level":"info","ts":"2026-07-07T00:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a7cf4776170a1b0a7874ac973063c75a871ffd2d5c9bd4942f7e5d27f087f29"}
{"level":"info","ts":"2026-07-07T00:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cff002cae0d7db4b0c8a0fd2b7499123a210e72e9ee30c674ccb540105a76f0"}
{"level":"info","ts":"2026-07-07T00:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dafc4097c42d1ace319edc5119c3e3387e36d4784b88a0f0ea24b91fc6d663cd"}
{"level":"info","ts":"2026-07-07T00:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f553c090307b033ddd966b1ed11975f79ccb89a2dad59e400744c8a999b495"}
{"level":"info","ts":"2026-07-07T00:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/228b9e13d8baed8681242c2abe8cb4899bc3f278c538bd56362de8486b407855"}
{"level":"info","ts":"2026-07-07T00:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c546b9a69df2e30a9bbaf81e0d1e6de2e93a504712f59a159a7c68c6876b7298"}
{"level":"info","ts":"2026-07-07T00:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55aa837960ef89e1535e81ea602ffca421065de263fe6208457fbc4b8135e0b2"}
{"level":"info","ts":"2026-07-07T00:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc30452f87d857a281cbcff2517403b13c393ccd77669f5916bdcdf45340e3ea"}
{"level":"info","ts":"2026-07-07T00:25:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aebcb4e980ecaed7eeb4d481afe820684d844174dc804dc121c10a1be99b1fc5"}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d"}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"info","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"error","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5"}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"info","ts":"2026-07-07T00:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5"}
{"level":"debug","ts":"2026-07-07T00:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"debug","ts":"2026-07-07T00:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"error","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"error","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57284","PortSpecifier":{"PortValue":57284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57284","PortSpecifier":{"PortValue":57284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":55521229},"http":{"id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07898bcd-444e-45ae-bebd-ab40547874e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":115223993},"http":{"id":"07898bcd-444e-45ae-bebd-ab40547874e1","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27b0fddb-797d-405e-89c7-33178f2a90a7","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":160398204},"http":{"id":"27b0fddb-797d-405e-89c7-33178f2a90a7","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y\"}"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","subscription":"e2e-rate-iso-a-31dbd9","tenant":"e2e-shared-a-b60cd9","userId":"983428b2-0d08-48a7-80df-1962569f3c56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-31dbd9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31dbd9"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","selected_subscription":"e2e-rate-iso-a-31dbd9","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-31dbd9@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57304","PortSpecifier":{"PortValue":57304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57304","PortSpecifier":{"PortValue":57304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383971,"nanos":222296837},"http":{"id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y\"}"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","subscription":"e2e-rate-iso-a-31dbd9","tenant":"e2e-shared-a-b60cd9","userId":"983428b2-0d08-48a7-80df-1962569f3c56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-31dbd9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31dbd9"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","selected_subscription":"e2e-rate-iso-a-31dbd9","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-31dbd9@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57320","PortSpecifier":{"PortValue":57320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57320","PortSpecifier":{"PortValue":57320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383972,"nanos":259653121},"http":{"id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y\"}"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","subscription":"e2e-rate-iso-a-31dbd9","tenant":"e2e-shared-a-b60cd9","userId":"983428b2-0d08-48a7-80df-1962569f3c56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-31dbd9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31dbd9"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","selected_subscription":"e2e-rate-iso-a-31dbd9","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-31dbd9@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383983,"nanos":19736785},"http":{"id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41356","PortSpecifier":{"PortValue":41356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41356","PortSpecifier":{"PortValue":41356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383983,"nanos":58841728},"http":{"id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383983,"nanos":100018288},"http":{"id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne\"}"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","subscription":"e2e-rate-iso-a-ce7ced","tenant":"e2e-shared-a-b60cd9","userId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","selected_subscription":"e2e-rate-iso-a-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-ce7ced@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50160","PortSpecifier":{"PortValue":50160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eff72f1-5b21-48a6-8364-590ea381ed07","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50160","PortSpecifier":{"PortValue":50160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383984,"nanos":135376913},"http":{"id":"8eff72f1-5b21-48a6-8364-590ea381ed07","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne\"}"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","subscription":"e2e-rate-iso-a-ce7ced","tenant":"e2e-shared-a-b60cd9","userId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","selected_subscription":"e2e-rate-iso-a-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-ce7ced@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c20021-4836-4bef-b86f-e889d59c7f2b","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383985,"nanos":172954428},"http":{"id":"87c20021-4836-4bef-b86f-e889d59c7f2b","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","subscription":"e2e-rate-iso-a-ce7ced","tenant":"e2e-shared-a-b60cd9","userId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","selected_subscription":"e2e-rate-iso-a-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-ce7ced@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41366","PortSpecifier":{"PortValue":41366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8718195-af5d-4def-9fbe-15da12654a74","method":"POST","path":"/ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e/v1/completions","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41366","PortSpecifier":{"PortValue":41366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383985,"nanos":214672554},"http":{"id":"c8718195-af5d-4def-9fbe-15da12654a74","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1074zTkBaAcwE0Loh_fRUa0bE6MZnIPCFdrI9bpQuUngpkzW5ViSE4Mc7AGC5"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1074zTkBaAcwE0Loh_fRUa0bE6MZnIPCFdrI9bpQuUngpkzW5ViSE4Mc7AGC5\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2923076-1150-4acd-b485-bc404c86db52","keyName":"e2e-rate-b-ce7ced","subscription":"e2e-rate-iso-b-ce7ced","tenant":"e2e-shared-b-c6e67e","userId":"a2923076-1150-4acd-b485-bc404c86db52","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\",\"requestedSubscription\":\"e2e-rate-iso-b-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6e67e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ce7ced","namespace":"ai-tenant-e2e-shared-b-c6e67e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8718195-af5d-4def-9fbe-15da12654a74","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a2923076-1150-4acd-b485-bc404c86db52","keyName":"e2e-rate-b-ce7ced","selected_subscription":"e2e-rate-iso-b-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-b-c6e67e/e2e-rate-iso-b-ce7ced@ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6e67e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ce7ced","namespace":"ai-tenant-e2e-shared-b-c6e67e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8718195-af5d-4def-9fbe-15da12654a74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8718195-af5d-4def-9fbe-15da12654a74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"info","ts":"2026-07-07T00:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}