--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83aa15dabb4669f6fc401479dfc34604e408d4a4f794a122dd90bb10026c650f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/911ca0db80958deec8f6400e1ba17625e3c5ea102b1e113b0633bd3bf17304fb"}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aa15dabb4669f6fc401479dfc34604e408d4a4f794a122dd90bb10026c650f"}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"911ca0db80958deec8f6400e1ba17625e3c5ea102b1e113b0633bd3bf17304fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["911ca0db80958deec8f6400e1ba17625e3c5ea102b1e113b0633bd3bf17304fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"911ca0db80958deec8f6400e1ba17625e3c5ea102b1e113b0633bd3bf17304fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"911ca0db80958deec8f6400e1ba17625e3c5ea102b1e113b0633bd3bf17304fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/911ca0db80958deec8f6400e1ba17625e3c5ea102b1e113b0633bd3bf17304fb"}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"debug","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"error","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183"}
{"level":"error","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"error","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b"}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"info","ts":"2026-07-09T20:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"debug","ts":"2026-07-09T20:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"error","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45738","PortSpecifier":{"PortValue":45738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45738","PortSpecifier":{"PortValue":45738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629721,"nanos":234491201},"http":{"id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ebdeec-0651-46b3-bf6a-8e4d0cb2109e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50342","PortSpecifier":{"PortValue":50342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50342","PortSpecifier":{"PortValue":50342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629721,"nanos":295632033},"http":{"id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbbf5b2a-3bab-4057-a7e8-14c4ad9f31db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45744","PortSpecifier":{"PortValue":45744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","method":"GET","path":"/maas-api/v1/api-keys/baf866b8-893e-47f3-a62d-39c3f20acce9","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45744","PortSpecifier":{"PortValue":45744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629721,"nanos":377687258},"http":{"id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","method":"GET","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/baf866b8-893e-47f3-a62d-39c3f20acce9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/baf866b8-893e-47f3-a62d-39c3f20acce9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c32d2e14-b29a-4b30-aa86-d799648fcea9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdd1925a-0466-4aec-a847-a565d814813c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50354","PortSpecifier":{"PortValue":50354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdd1925a-0466-4aec-a847-a565d814813c","method":"GET","path":"/maas-api/v1/api-keys/0842704d-ce3f-4b7d-8f87-88066ad9b2ba","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdd1925a-0466-4aec-a847-a565d814813c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50354","PortSpecifier":{"PortValue":50354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629721,"nanos":413137262},"http":{"id":"bdd1925a-0466-4aec-a847-a565d814813c","method":"GET","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0842704d-ce3f-4b7d-8f87-88066ad9b2ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdd1925a-0466-4aec-a847-a565d814813c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdd1925a-0466-4aec-a847-a565d814813c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdd1925a-0466-4aec-a847-a565d814813c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0842704d-ce3f-4b7d-8f87-88066ad9b2ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd1925a-0466-4aec-a847-a565d814813c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd1925a-0466-4aec-a847-a565d814813c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd1925a-0466-4aec-a847-a565d814813c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdd1925a-0466-4aec-a847-a565d814813c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd1925a-0466-4aec-a847-a565d814813c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd1925a-0466-4aec-a847-a565d814813c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdd1925a-0466-4aec-a847-a565d814813c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdd1925a-0466-4aec-a847-a565d814813c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54290","PortSpecifier":{"PortValue":54290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50b0b0d5-5743-4b16-860b-aca47caa610e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54290","PortSpecifier":{"PortValue":54290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629738,"nanos":522209884},"http":{"id":"50b0b0d5-5743-4b16-860b-aca47caa610e","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50b0b0d5-5743-4b16-860b-aca47caa610e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45116","PortSpecifier":{"PortValue":45116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b12d1458-cf23-4829-acaf-c57aef04f39e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45116","PortSpecifier":{"PortValue":45116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629738,"nanos":556742108},"http":{"id":"b12d1458-cf23-4829-acaf-c57aef04f39e","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12d1458-cf23-4829-acaf-c57aef04f39e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54304","PortSpecifier":{"PortValue":54304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54304","PortSpecifier":{"PortValue":54304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629738,"nanos":597044498},"http":{"id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","method":"GET","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1vfN4gPeR2VGyXmH_y3ZM1OjqwIfJrKDu9pvITdzflCAA0xMQN2GIJQNBMJW"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1vfN4gPeR2VGyXmH_y3ZM1OjqwIfJrKDu9pvITdzflCAA0xMQN2GIJQNBMJW\"}"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93203057-2955-4dd0-9576-7456d15c8818","keyName":"e2e-auth-iso-a-00b352","subscription":"e2e-auth-iso-9dd534","tenant":"e2e-shared-a-a56db7","userId":"93203057-2955-4dd0-9576-7456d15c8818","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9dd534"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f34b2aa3-7f4c-4b61-9c86-e198cc89c7dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47916","PortSpecifier":{"PortValue":47916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47916","PortSpecifier":{"PortValue":47916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629755,"nanos":772094453},"http":{"id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"021dba4a-8b62-428a-a57e-c9fa644dbaa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53760","PortSpecifier":{"PortValue":53760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53760","PortSpecifier":{"PortValue":53760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629755,"nanos":803623296},"http":{"id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9585f59c-f856-4f90-8457-8ee2a987ba4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53770","PortSpecifier":{"PortValue":53770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc3beba1-fc99-474d-b641-03a74261a8f6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53770","PortSpecifier":{"PortValue":53770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629755,"nanos":838801377},"http":{"id":"dc3beba1-fc99-474d-b641-03a74261a8f6","method":"GET","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XwG5xSvdB9b4Sh3e_OFszmrqJmWL1k31LF7fJO8uPY4p2cTfSwsvyyGxDSVo"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XwG5xSvdB9b4Sh3e_OFszmrqJmWL1k31LF7fJO8uPY4p2cTfSwsvyyGxDSVo\"}"}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T20:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc3beba1-fc99-474d-b641-03a74261a8f6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55994","PortSpecifier":{"PortValue":55994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"703a62a2-bd96-4219-88cf-7c18d683482f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55994","PortSpecifier":{"PortValue":55994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629775,"nanos":61188052},"http":{"id":"703a62a2-bd96-4219-88cf-7c18d683482f","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703a62a2-bd96-4219-88cf-7c18d683482f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33024","PortSpecifier":{"PortValue":33024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d5a6fca-e313-4cfd-b3db-82835317389b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33024","PortSpecifier":{"PortValue":33024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629775,"nanos":97012944},"http":{"id":"7d5a6fca-e313-4cfd-b3db-82835317389b","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d5a6fca-e313-4cfd-b3db-82835317389b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55998","PortSpecifier":{"PortValue":55998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55998","PortSpecifier":{"PortValue":55998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629775,"nanos":131931940},"http":{"id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00c65ac8-e922-42fb-b97d-712e8c4ac6eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5d9b267-1616-41a9-9313-71f7d4a02122","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629775,"nanos":164321411},"http":{"id":"b5d9b267-1616-41a9-9313-71f7d4a02122","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:42:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d9b267-1616-41a9-9313-71f7d4a02122","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55538","PortSpecifier":{"PortValue":55538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55538","PortSpecifier":{"PortValue":55538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629792,"nanos":292871269},"http":{"id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c0bc74d-948f-4cd5-97b1-f796abe81234","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50204","PortSpecifier":{"PortValue":50204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50204","PortSpecifier":{"PortValue":50204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629792,"nanos":326141241},"http":{"id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efdf92ba-ec4f-4378-ae34-fc8702e8e440","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50206","PortSpecifier":{"PortValue":50206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","method":"GET","path":"/maas-api/v1/api-keys/68034bc1-7997-4887-8794-9207e8fc3c8d","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50206","PortSpecifier":{"PortValue":50206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629792,"nanos":362629301},"http":{"id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","method":"GET","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68034bc1-7997-4887-8794-9207e8fc3c8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68034bc1-7997-4887-8794-9207e8fc3c8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9095edaa-da26-4ca1-b445-2f4dd36a340e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55540","PortSpecifier":{"PortValue":55540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","method":"GET","path":"/maas-api/v1/api-keys/68034bc1-7997-4887-8794-9207e8fc3c8d","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55540","PortSpecifier":{"PortValue":55540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629792,"nanos":392272995},"http":{"id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","method":"GET","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68034bc1-7997-4887-8794-9207e8fc3c8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68034bc1-7997-4887-8794-9207e8fc3c8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:43:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"381031cd-1499-46e4-8c5e-67bc633ecd8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43514","PortSpecifier":{"PortValue":43514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43514","PortSpecifier":{"PortValue":43514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629816,"nanos":857772185},"http":{"id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed994ea7-efe3-4d3b-99ff-9b2646b8b8a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51192","PortSpecifier":{"PortValue":51192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f19b2797-f055-4c91-aea3-f23ada94a478","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51192","PortSpecifier":{"PortValue":51192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629816,"nanos":893395880},"http":{"id":"f19b2797-f055-4c91-aea3-f23ada94a478","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/auth-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f19b2797-f055-4c91-aea3-f23ada94a478","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43528","PortSpecifier":{"PortValue":43528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43528","PortSpecifier":{"PortValue":43528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629816,"nanos":931617704},"http":{"id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TjvxTWg1tsFmHs2v_TML0tuRbUZCdc3hHBO2PNDGgoSHzgVprDj8U5lRnKDK"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TjvxTWg1tsFmHs2v_TML0tuRbUZCdc3hHBO2PNDGgoSHzgVprDj8U5lRnKDK\"}"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8db11b5a-5e06-4662-8e9c-b0e7b5cfb2a6","keyName":"e2e-auth-iso-a-544a2a","subscription":"e2e-auth-iso-3fd2b5","tenant":"e2e-shared-a-a56db7","userId":"8db11b5a-5e06-4662-8e9c-b0e7b5cfb2a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/auth-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3fd2b5"}
{"level":"info","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b76695ab-fc0f-498c-ac3c-8bf96a0662a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/357140279440dc17efaa284fd704d3c32b3c1d76d97bed4d15357d418c051f84"}
{"level":"info","ts":"2026-07-09T20:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48cfb2e5d004ae1e08e87574a88c044bb8ed392e64affb6eab16e95415f4aa73"}
{"level":"info","ts":"2026-07-09T20:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/501cb998e8e52ff07b4ca7e786ef360d5612fd164c17ccaa8e6826fae8075183"}
{"level":"info","ts":"2026-07-09T20:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d8605e7feb60898b970068f95bfd2db9c59a84127b17607527df935dc373261"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/911ca0db80958deec8f6400e1ba17625e3c5ea102b1e113b0633bd3bf17304fb"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eacad14a0bbdf7dc8f64169e68bb0e7160472cc29a06734936bae0f946959fae"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/115157b36899810efe73462e8f38397c51bc4ab86b0cefbf86a98237d784d192"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ee527b505e0fa8068b86fd4e9ae39f49026914123257fff2500e822e1a956fc"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f3d9a61d9c0423d0c1acf014bc5e4b1f967f10e1835ee7dca35436abb79333b"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d649478991a843dbce20782559ca023b5cf395e84649784fdf9c8e7052c27d0"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f57e55db3fc29167c1a0aa7442daa563fc11d4be881958ba992ba6b4942758fa"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d6153049a67ff417b07432627c943c867d5f7e170ddc9921a03e56885fcab7c"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7051779bcc8864460c7b540e2ae8e3cddc430909958c5cdbb192d9464a234536"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/784c41d022c62d123b708d8e3e20a5e5bbf5717f82eb5e2de85a21c6eb891c57"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f48b27ed5dfa0ae439e26fd7cc7ac93812db2881bb3214bb94dcef07e45ed91"}
{"level":"info","ts":"2026-07-09T20:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2e3b49fbff358061a08d43dcaf4851cb8956dcc21f84d7530087b5851fb1adc"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898"}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60"}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de"}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:43:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"info","ts":"2026-07-09T20:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de"}
{"level":"debug","ts":"2026-07-09T20:44:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"info","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0"}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0"}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0"}
{"level":"info","ts":"2026-07-09T20:44:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0"}
{"level":"info","ts":"2026-07-09T20:44:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"}
{"level":"error","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:44:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e"}
{"level":"error","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83aa15dabb4669f6fc401479dfc34604e408d4a4f794a122dd90bb10026c650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aa15dabb4669f6fc401479dfc34604e408d4a4f794a122dd90bb10026c650f"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"}
{"level":"info","ts":"2026-07-09T20:44:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57866","PortSpecifier":{"PortValue":57866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57866","PortSpecifier":{"PortValue":57866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629887,"nanos":751119023},"http":{"id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/sub-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d561106-6e70-4fd6-aef3-bdb9e86fbf30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51460","PortSpecifier":{"PortValue":51460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51460","PortSpecifier":{"PortValue":51460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629887,"nanos":786978309},"http":{"id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/sub-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8271858-c14d-44f5-b8b1-5058bc2d7a61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dafc38-d55c-48de-baa8-828d675984eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37dafc38-d55c-48de-baa8-828d675984eb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dafc38-d55c-48de-baa8-828d675984eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629887,"nanos":824107273},"http":{"id":"37dafc38-d55c-48de-baa8-828d675984eb","method":"GET","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JvK0owU8raie9bRz_LmgBq9Ec3TUVI20BMAUfhVpC26MWLiut9odtXf7uYMd"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JvK0owU8raie9bRz_LmgBq9Ec3TUVI20BMAUfhVpC26MWLiut9odtXf7uYMd\"}"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d556d69-c651-4e2d-a1db-850c7db519f7","keyName":"e2e-sub-iso-6b0144","subscription":"e2e-a-only-b269a2","tenant":"e2e-shared-a-a56db7","userId":"3d556d69-c651-4e2d-a1db-850c7db519f7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37dafc38-d55c-48de-baa8-828d675984eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/sub-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dafc38-d55c-48de-baa8-828d675984eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b269a2"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dafc38-d55c-48de-baa8-828d675984eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dafc38-d55c-48de-baa8-828d675984eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51476","PortSpecifier":{"PortValue":51476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51476","PortSpecifier":{"PortValue":51476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629887,"nanos":860698452},"http":{"id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","method":"GET","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1K50O4jXVaFGfoBDd_Ffn5c5KozFAENKtqwHHMreVx1y3dKsdBGXlJI1Cq0xj"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1K50O4jXVaFGfoBDd_Ffn5c5KozFAENKtqwHHMreVx1y3dKsdBGXlJI1Cq0xj\"}"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e4c7245-833c-46c2-b947-1c1bfa82ec44","keyName":"e2e-sub-iso-91d621","subscription":"e2e-b-only-b269a2","tenant":"e2e-shared-b-8c2e89","userId":"5e4c7245-833c-46c2-b947-1c1bfa82ec44","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/sub-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b269a2"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69b47e5d-86dd-48f0-8649-93f7ef2757f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59886","PortSpecifier":{"PortValue":59886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59886","PortSpecifier":{"PortValue":59886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629899,"nanos":945559001},"http":{"id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/sub-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386c1c7e-d26b-45a7-a7cd-d3f333e6bcc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53262","PortSpecifier":{"PortValue":53262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4e13a18-0461-46c3-a98b-385372b7a299","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53262","PortSpecifier":{"PortValue":53262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629899,"nanos":979981068},"http":{"id":"c4e13a18-0461-46c3-a98b-385372b7a299","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/sub-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:44:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4e13a18-0461-46c3-a98b-385372b7a299","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"265df080-218a-4a52-9b39-7048618854cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59902","PortSpecifier":{"PortValue":59902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"265df080-218a-4a52-9b39-7048618854cc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"265df080-218a-4a52-9b39-7048618854cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59902","PortSpecifier":{"PortValue":59902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629900,"nanos":27528128},"http":{"id":"265df080-218a-4a52-9b39-7048618854cc","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GFyVHJeflgm1njTk_je1sLDuDyZnbt68jr09R8w4r6ts9832EkWa52QkkwX7"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"265df080-218a-4a52-9b39-7048618854cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GFyVHJeflgm1njTk_je1sLDuDyZnbt68jr09R8w4r6ts9832EkWa52QkkwX7\"}"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"84946fb4-b4db-45f5-8a2f-f325c0ee3cb2","keyName":"e2e-sub-iso-10871e","subscription":"e2e-shared-sub-e146e3","tenant":"e2e-shared-a-a56db7","userId":"84946fb4-b4db-45f5-8a2f-f325c0ee3cb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"265df080-218a-4a52-9b39-7048618854cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/sub-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"265df080-218a-4a52-9b39-7048618854cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e146e3"}
{"level":"info","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"265df080-218a-4a52-9b39-7048618854cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"265df080-218a-4a52-9b39-7048618854cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53268","PortSpecifier":{"PortValue":53268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5cd330a-610c-429b-9632-4838cff4aa99","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53268","PortSpecifier":{"PortValue":53268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629900,"nanos":65474545},"http":{"id":"d5cd330a-610c-429b-9632-4838cff4aa99","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cubR9NR2F2cgUwzK_2vCMj8sOWw4GJYob0jWmicLPkKYi7jS3sE6miSESjQF"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cubR9NR2F2cgUwzK_2vCMj8sOWw4GJYob0jWmicLPkKYi7jS3sE6miSESjQF\"}"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5e7bada-f4bd-44e7-8cf6-69187f5cb09e","keyName":"e2e-sub-iso-93660a","subscription":"e2e-shared-sub-e146e3","tenant":"e2e-shared-b-8c2e89","userId":"a5e7bada-f4bd-44e7-8cf6-69187f5cb09e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/sub-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e146e3"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:45:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5cd330a-610c-429b-9632-4838cff4aa99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/958fdd071130c59cb1eb884dd030b4b27c984f2ea7eee6da535edb288a6c8deb"}
{"level":"info","ts":"2026-07-09T20:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af50c6037efb636933088fb7c1d24eb0b36f26def39d5483064dde6b50219898"}
{"level":"info","ts":"2026-07-09T20:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ec1490923039d12db78da4eaef913761cc4bbd5a4fc91cb105e5625d083b8f"}
{"level":"info","ts":"2026-07-09T20:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/232d30cab9281508e8089bceca5bbe5d0ef22c930c5ee5fc52f29e6abc2e639e"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37e00faf7a0e6dc6e027c5a51fa589d3ac4c5c61b0f8116aad69a7a38c5577de"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3576fe24edf247d42652eed8f8107c9b5d089099bf2c847e8ce33ff96b4df92f"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74ef8ec6ab1464a597d79b6b15abb7ecc6beb5171fdd9308cd0b3f5b7263fbdf"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/461e3c6d5b25e933a2c0152397b9925aa27a50239c3c362faa49cff3611d8063"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/265f69ee94651d9fc95acfffdda0355573c1e24e8393efa042bf5ae4d9c390c0"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3faf6b1380d2e17fd53ecc0c026e8b18b6610e55dd6f2261d87b90b26e2d91b7"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13ce1b30863470010dbb399b9cda807d2366d1d6727d2cf5588919f851a60033"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5370d141baa51a3d9fc704cc7d0193d295487e30d323ab9a65eee73caad9c46b"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60fdf8d7af584e69e3245204b0f036c7c17672ff832f98483683bb44c9e4be60"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b50d7c7e983a3262968ca649244be2bb6f9cf8e940d96ae81256ada468f55af"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31878ff204a86f3bdda423c33d777b33c3f1cf44497ea755071b3f07b6cb6f60"}
{"level":"info","ts":"2026-07-09T20:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01850bf7fb72bb1b0c247e99981add0347412d00954126c6ae0d32ac52dbfd2a"}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080"}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080"}
{"level":"info","ts":"2026-07-09T20:45:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"debug","ts":"2026-07-09T20:45:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"error","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"error","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:45:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080"}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"debug","ts":"2026-07-09T20:46:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T20:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83aa15dabb4669f6fc401479dfc34604e408d4a4f794a122dd90bb10026c650f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83aa15dabb4669f6fc401479dfc34604e408d4a4f794a122dd90bb10026c650f"}
{"level":"debug","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"info","ts":"2026-07-09T20:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"}
{"level":"info","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34702","PortSpecifier":{"PortValue":34702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34702","PortSpecifier":{"PortValue":34702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629965,"nanos":972335880},"http":{"id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c626a42f-f376-442d-9b56-46ea4bbd7a9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37792","PortSpecifier":{"PortValue":37792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37792","PortSpecifier":{"PortValue":37792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629966,"nanos":10318745},"http":{"id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/rate-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2bb842d-ad0c-44c1-881b-477c091d2f44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34714","PortSpecifier":{"PortValue":34714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","method":"POST","path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34714","PortSpecifier":{"PortValue":34714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629966,"nanos":48873115},"http":{"id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RAKGTYCblKIWRXbG_wXileOXYn8ScA4vwhC0ojQzvbu0f8PEIqOeBx27eues"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RAKGTYCblKIWRXbG_wXileOXYn8ScA4vwhC0ojQzvbu0f8PEIqOeBx27eues\"}"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","keyName":"e2e-rate-a-5fc437","subscription":"e2e-rate-iso-a-5fc437","tenant":"e2e-shared-a-a56db7","userId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\",\"requestedSubscription\":\"e2e-rate-iso-a-5fc437\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5fc437","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5fc437"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","keyName":"e2e-rate-a-5fc437","selected_subscription":"e2e-rate-iso-a-5fc437","selected_subscription_key":"ai-tenant-e2e-shared-a-a56db7/e2e-rate-iso-a-5fc437@ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5fc437","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d4a7d1-a8f9-4749-b6bd-7a52a340415f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b362a363-6636-4a67-9343-ef296607d4f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b362a363-6636-4a67-9343-ef296607d4f3","method":"POST","path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b362a363-6636-4a67-9343-ef296607d4f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629967,"nanos":107417676},"http":{"id":"b362a363-6636-4a67-9343-ef296607d4f3","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RAKGTYCblKIWRXbG_wXileOXYn8ScA4vwhC0ojQzvbu0f8PEIqOeBx27eues"}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RAKGTYCblKIWRXbG_wXileOXYn8ScA4vwhC0ojQzvbu0f8PEIqOeBx27eues\"}"}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","keyName":"e2e-rate-a-5fc437","subscription":"e2e-rate-iso-a-5fc437","tenant":"e2e-shared-a-a56db7","userId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\",\"requestedSubscription\":\"e2e-rate-iso-a-5fc437\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5fc437","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b362a363-6636-4a67-9343-ef296607d4f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5fc437"}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b362a363-6636-4a67-9343-ef296607d4f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","keyName":"e2e-rate-a-5fc437","selected_subscription":"e2e-rate-iso-a-5fc437","selected_subscription_key":"ai-tenant-e2e-shared-a-a56db7/e2e-rate-iso-a-5fc437@ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5fc437","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b362a363-6636-4a67-9343-ef296607d4f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b362a363-6636-4a67-9343-ef296607d4f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55774","PortSpecifier":{"PortValue":55774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e99748c8-10c4-41e3-9888-61d9617153a9","method":"POST","path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55774","PortSpecifier":{"PortValue":55774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629968,"nanos":143892172},"http":{"id":"e99748c8-10c4-41e3-9888-61d9617153a9","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RAKGTYCblKIWRXbG_wXileOXYn8ScA4vwhC0ojQzvbu0f8PEIqOeBx27eues"}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RAKGTYCblKIWRXbG_wXileOXYn8ScA4vwhC0ojQzvbu0f8PEIqOeBx27eues\"}"}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","keyName":"e2e-rate-a-5fc437","subscription":"e2e-rate-iso-a-5fc437","tenant":"e2e-shared-a-a56db7","userId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\",\"requestedSubscription\":\"e2e-rate-iso-a-5fc437\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5fc437","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5fc437"}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36ef42b5-6f66-4339-8583-93ccb2fcf14d","keyName":"e2e-rate-a-5fc437","selected_subscription":"e2e-rate-iso-a-5fc437","selected_subscription_key":"ai-tenant-e2e-shared-a-a56db7/e2e-rate-iso-a-5fc437@ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5fc437","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e99748c8-10c4-41e3-9888-61d9617153a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53846","PortSpecifier":{"PortValue":53846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43b2552b-1e26-4907-bfbb-8975e80b7392","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53846","PortSpecifier":{"PortValue":53846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629981,"nanos":85089009},"http":{"id":"43b2552b-1e26-4907-bfbb-8975e80b7392","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b2552b-1e26-4907-bfbb-8975e80b7392","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4c86b5d-8987-407e-8935-0113f6197939","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4c86b5d-8987-407e-8935-0113f6197939","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4c86b5d-8987-407e-8935-0113f6197939","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629981,"nanos":123248207},"http":{"id":"d4c86b5d-8987-407e-8935-0113f6197939","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4c86b5d-8987-407e-8935-0113f6197939","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4c86b5d-8987-407e-8935-0113f6197939","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"]}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4c86b5d-8987-407e-8935-0113f6197939","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3efc6a93ea47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b8824c14-1f4e-4daa-a0ca-2519f7509c69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"07634a39-ac4d-43e9-b09d-069d823c44ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c86b5d-8987-407e-8935-0113f6197939","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c86b5d-8987-407e-8935-0113f6197939","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c86b5d-8987-407e-8935-0113f6197939","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/rate-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4c86b5d-8987-407e-8935-0113f6197939","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4c86b5d-8987-407e-8935-0113f6197939","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4c86b5d-8987-407e-8935-0113f6197939","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4c86b5d-8987-407e-8935-0113f6197939","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4c86b5d-8987-407e-8935-0113f6197939","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53860","PortSpecifier":{"PortValue":53860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52a67151-194d-426c-9dec-0cc649c29fa6","method":"POST","path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53860","PortSpecifier":{"PortValue":53860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629981,"nanos":158421289},"http":{"id":"52a67151-194d-426c-9dec-0cc649c29fa6","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XxOhxXiR8cPRw2Sg_JvTD0IeZ4oCb2ItBMXQVLkc5Qi6xotqGGG63hpbp41U"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XxOhxXiR8cPRw2Sg_JvTD0IeZ4oCb2ItBMXQVLkc5Qi6xotqGGG63hpbp41U\"}"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","keyName":"e2e-rate-a-cb338e","subscription":"e2e-rate-iso-a-cb338e","tenant":"e2e-shared-a-a56db7","userId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\",\"requestedSubscription\":\"e2e-rate-iso-a-cb338e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb338e","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb338e"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","keyName":"e2e-rate-a-cb338e","selected_subscription":"e2e-rate-iso-a-cb338e","selected_subscription_key":"ai-tenant-e2e-shared-a-a56db7/e2e-rate-iso-a-cb338e@ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb338e","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52a67151-194d-426c-9dec-0cc649c29fa6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53870","PortSpecifier":{"PortValue":53870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","method":"POST","path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53870","PortSpecifier":{"PortValue":53870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629982,"nanos":191260091},"http":{"id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XxOhxXiR8cPRw2Sg_JvTD0IeZ4oCb2ItBMXQVLkc5Qi6xotqGGG63hpbp41U"}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XxOhxXiR8cPRw2Sg_JvTD0IeZ4oCb2ItBMXQVLkc5Qi6xotqGGG63hpbp41U\"}"}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","keyName":"e2e-rate-a-cb338e","subscription":"e2e-rate-iso-a-cb338e","tenant":"e2e-shared-a-a56db7","userId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\",\"requestedSubscription\":\"e2e-rate-iso-a-cb338e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb338e","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb338e"}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","keyName":"e2e-rate-a-cb338e","selected_subscription":"e2e-rate-iso-a-cb338e","selected_subscription_key":"ai-tenant-e2e-shared-a-a56db7/e2e-rate-iso-a-cb338e@ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb338e","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cb9a9a2-d531-429e-bfbf-17f11820abc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53876","PortSpecifier":{"PortValue":53876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","method":"POST","path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions","host":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53876","PortSpecifier":{"PortValue":53876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629983,"nanos":224211536},"http":{"id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","method":"POST","headers":{":authority":"e2e-shared-a-a56db7.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XxOhxXiR8cPRw2Sg_JvTD0IeZ4oCb2ItBMXQVLkc5Qi6xotqGGG63hpbp41U"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XxOhxXiR8cPRw2Sg_JvTD0IeZ4oCb2ItBMXQVLkc5Qi6xotqGGG63hpbp41U\"}"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","keyName":"e2e-rate-a-cb338e","subscription":"e2e-rate-iso-a-cb338e","tenant":"e2e-shared-a-a56db7","userId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\",\"requestedSubscription\":\"e2e-rate-iso-a-cb338e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a56db7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb338e","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb338e"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133e97f-8d9e-41a0-bf59-6fc8965bfe67","keyName":"e2e-rate-a-cb338e","selected_subscription":"e2e-rate-iso-a-cb338e","selected_subscription_key":"ai-tenant-e2e-shared-a-a56db7/e2e-rate-iso-a-cb338e@ai-tenant-e2e-shared-a-a56db7/rate-test-model-a56db7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a56db7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb338e","namespace":"ai-tenant-e2e-shared-a-a56db7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00a7998-e5f9-4fa7-bd22-2c3ff8ee5fe2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51336","PortSpecifier":{"PortValue":51336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"801e2c94-29d5-42e1-853a-86dab2be0f99","method":"POST","path":"/ai-tenant-e2e-shared-b-8c2e89/rate-test-model-8c2e89/v1/completions","host":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51336","PortSpecifier":{"PortValue":51336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783629983,"nanos":256072894},"http":{"id":"801e2c94-29d5-42e1-853a-86dab2be0f99","method":"POST","headers":{":authority":"e2e-shared-b-8c2e89.apps.b18b601f-2b95-48a3-8954-3efc6a93ea47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8c2e89/rate-test-model-8c2e89/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VWrxiuPxFBXZbNaX_pmROZiRwCmgR6tHDxgy0xX6NovTWdzYQNObqrbDumLi"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VWrxiuPxFBXZbNaX_pmROZiRwCmgR6tHDxgy0xX6NovTWdzYQNObqrbDumLi\"}"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98b64b2f-89b2-4a9f-b248-5fe9cbd345cd","keyName":"e2e-rate-b-cb338e","subscription":"e2e-rate-iso-b-cb338e","tenant":"e2e-shared-b-8c2e89","userId":"98b64b2f-89b2-4a9f-b248-5fe9cbd345cd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8c2e89/rate-test-model-8c2e89\",\"requestedSubscription\":\"e2e-rate-iso-b-cb338e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8c2e89.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c2e89","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cb338e","namespace":"ai-tenant-e2e-shared-b-8c2e89","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8c2e89/rate-test-model-8c2e89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-cb338e"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98b64b2f-89b2-4a9f-b248-5fe9cbd345cd","keyName":"e2e-rate-b-cb338e","selected_subscription":"e2e-rate-iso-b-cb338e","selected_subscription_key":"ai-tenant-e2e-shared-b-8c2e89/e2e-rate-iso-b-cb338e@ai-tenant-e2e-shared-b-8c2e89/rate-test-model-8c2e89","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c2e89","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cb338e","namespace":"ai-tenant-e2e-shared-b-8c2e89","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T20:46:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801e2c94-29d5-42e1-853a-86dab2be0f99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T20:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daf672ced3f553a7b773a3e7e785c4527178815730e7cf108ddf99361681b075"}
{"level":"info","ts":"2026-07-09T20:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a9eba688e7eafc64dbbbf5d9e893f1bb6b7b858626ee37a490a2c8ab0cba551"}
{"level":"info","ts":"2026-07-09T20:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5204c66feb72b29bad60dacf90ab6e1a27c3881be1c098f6a7c106d54acde080"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f6a3bc6efbc0cbf0b7e61a32d6b5212517c381f137c3ef8b969afaeaccb48ce"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0d9101013245a0ef1989c2079c0f4705ed5294b79c6c433d5bcd883f1def7c0"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f8ae683e5b3c5424086527665d26e11bfe79c8a251ea09d82258e640475ef7"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebabf157b7ea9942dd51df8e060cc3b5fd0a1edb88178ad07a7ec44f8375b415"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a7d605126dc8968467582225aa2a76c61e1719a59994026e3d39ce624fc586"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80424b82a8c37d5d84c9b437d0c0cfba98648f6e26e358889ac6847adedaedc5"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b94fbecf1c6780762bf8c701dee03a2e2357c642443c69a19b4ea40487cede07"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/723736e5aad6cbb998fb4d1b63ef7d0cb002d47da1baf0feb79a2c429c38580f"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/600ada76b4f21d07b25472d4915315b2559b86eda071de5e33ef0baa39264efa"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde79c2c7893cf2f2bbbcc4b3597d30ad76e32b1a60301a4e92a8e8adcf142c6"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a6fb52f657cb9d50498429439ee8dbf6cf31f79eed9053dc6e260d46f41a52b"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a5fc528158a983f5c344bb50c61ffdc5fb9bd6e58872739d30ba7ef8f111769"}
{"level":"info","ts":"2026-07-09T20:46:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d04c53ab09f9ff50f838acae779c730c7b7d8355bb6b48f0e725f9120516839f"}
{"level":"info","ts":"2026-07-09T20:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91e045d1a16d41cc38d8d07ae51ac0211c7d35d7bd684b7efb33cf11734d0bd0"}
{"level":"info","ts":"2026-07-09T20:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83aa15dabb4669f6fc401479dfc34604e408d4a4f794a122dd90bb10026c650f"}
{"level":"info","ts":"2026-07-09T20:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/235ced053bab1639c62fe0d3b0c8817635e97534b6a968193c42e80da22b10ec"}
{"level":"info","ts":"2026-07-09T20:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7605520ba0953b519698b2bf4acc3f533e15626f2cb0d91dd62f4470c77080d0"}
{"level":"info","ts":"2026-07-09T20:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aed3059389ca83db22a95ba2365b399931f8ec2f2911cb45fad4a8c71a7849e"}
{"level":"info","ts":"2026-07-09T20:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ec3f06e030c3ade875bc6c7866d0555decfbc5e9ded7a3694a430f6825f48e7"}
{"level":"info","ts":"2026-07-09T20:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67e3aa7ea3fdbf25156a1221d2752e081a8aa0ce18eb5d42d7039f2f18550ffa"}
{"level":"info","ts":"2026-07-09T20:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc3d5944445b660bc0c2bba496f910fd28265b29c9576e635152544fc32a0119"}