--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-23T23:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44998","PortSpecifier":{"PortValue":44998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44998","PortSpecifier":{"PortValue":44998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847812,"nanos":261687531},"http":{"id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/auth-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d849c5d4-4c11-4cad-807d-daaa0c2bad12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36144","PortSpecifier":{"PortValue":36144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36144","PortSpecifier":{"PortValue":36144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847812,"nanos":297320026},"http":{"id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/auth-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9621c1bb-a92f-48ab-9e6f-af1eb13d75dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36148","PortSpecifier":{"PortValue":36148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36148","PortSpecifier":{"PortValue":36148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847812,"nanos":339968543},"http":{"id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","method":"GET","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1179UnOfYTzlaPwhu_mYAL38L8qqXXxqzfAeumbiYa42tIqHGFbLvsSCLwdwM"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1179UnOfYTzlaPwhu_mYAL38L8qqXXxqzfAeumbiYa42tIqHGFbLvsSCLwdwM\"}"}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-23T23:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01c0bfec-4a69-485d-9e30-d8b5d8cdee80","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"error","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97884a46-77e0-4804-8a39-795829e4c899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50544","PortSpecifier":{"PortValue":50544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97884a46-77e0-4804-8a39-795829e4c899","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97884a46-77e0-4804-8a39-795829e4c899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50544","PortSpecifier":{"PortValue":50544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847829,"nanos":532886361},"http":{"id":"97884a46-77e0-4804-8a39-795829e4c899","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97884a46-77e0-4804-8a39-795829e4c899","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97884a46-77e0-4804-8a39-795829e4c899","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97884a46-77e0-4804-8a39-795829e4c899","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97884a46-77e0-4804-8a39-795829e4c899","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97884a46-77e0-4804-8a39-795829e4c899","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97884a46-77e0-4804-8a39-795829e4c899","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/auth-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97884a46-77e0-4804-8a39-795829e4c899","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97884a46-77e0-4804-8a39-795829e4c899","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97884a46-77e0-4804-8a39-795829e4c899","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97884a46-77e0-4804-8a39-795829e4c899","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97884a46-77e0-4804-8a39-795829e4c899","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41982","PortSpecifier":{"PortValue":41982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74670ff0-1bbf-4492-95f9-83f4a746d101","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41982","PortSpecifier":{"PortValue":41982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847829,"nanos":574131324},"http":{"id":"74670ff0-1bbf-4492-95f9-83f4a746d101","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/auth-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74670ff0-1bbf-4492-95f9-83f4a746d101","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59c40934-f552-485d-9c8f-766d7c0e06f7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50556","PortSpecifier":{"PortValue":50556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847829,"nanos":617210875},"http":{"id":"59c40934-f552-485d-9c8f-766d7c0e06f7","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/auth-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c40934-f552-485d-9c8f-766d7c0e06f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41990","PortSpecifier":{"PortValue":41990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41990","PortSpecifier":{"PortValue":41990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847829,"nanos":658601496},"http":{"id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/auth-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:03:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f74411f-5bfb-4ccf-a35b-d330851c32a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50514","PortSpecifier":{"PortValue":50514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3069e08-18f8-49e4-a43d-631646d1dd15","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50514","PortSpecifier":{"PortValue":50514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847846,"nanos":894452775},"http":{"id":"b3069e08-18f8-49e4-a43d-631646d1dd15","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/auth-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3069e08-18f8-49e4-a43d-631646d1dd15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b273d5-b454-48d1-ad8c-66758901a127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60774","PortSpecifier":{"PortValue":60774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04b273d5-b454-48d1-ad8c-66758901a127","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b273d5-b454-48d1-ad8c-66758901a127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60774","PortSpecifier":{"PortValue":60774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847846,"nanos":927369789},"http":{"id":"04b273d5-b454-48d1-ad8c-66758901a127","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04b273d5-b454-48d1-ad8c-66758901a127","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04b273d5-b454-48d1-ad8c-66758901a127","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04b273d5-b454-48d1-ad8c-66758901a127","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b273d5-b454-48d1-ad8c-66758901a127","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b273d5-b454-48d1-ad8c-66758901a127","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b273d5-b454-48d1-ad8c-66758901a127","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/auth-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04b273d5-b454-48d1-ad8c-66758901a127","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b273d5-b454-48d1-ad8c-66758901a127","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b273d5-b454-48d1-ad8c-66758901a127","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b273d5-b454-48d1-ad8c-66758901a127","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b273d5-b454-48d1-ad8c-66758901a127","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60790","PortSpecifier":{"PortValue":60790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1813a318-6d1e-4e42-868a-29257fbb8905","method":"GET","path":"/maas-api/v1/api-keys/ce4d1fba-4b37-4ddd-84e3-bd328ff7cbe2","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60790","PortSpecifier":{"PortValue":60790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847846,"nanos":959867168},"http":{"id":"1813a318-6d1e-4e42-868a-29257fbb8905","method":"GET","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ce4d1fba-4b37-4ddd-84e3-bd328ff7cbe2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ce4d1fba-4b37-4ddd-84e3-bd328ff7cbe2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/auth-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1813a318-6d1e-4e42-868a-29257fbb8905","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50516","PortSpecifier":{"PortValue":50516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"316f88f4-85fc-4467-a53d-48eab36f10f7","method":"GET","path":"/maas-api/v1/api-keys/ce4d1fba-4b37-4ddd-84e3-bd328ff7cbe2","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50516","PortSpecifier":{"PortValue":50516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847846,"nanos":998922447},"http":{"id":"316f88f4-85fc-4467-a53d-48eab36f10f7","method":"GET","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ce4d1fba-4b37-4ddd-84e3-bd328ff7cbe2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ce4d1fba-4b37-4ddd-84e3-bd328ff7cbe2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/auth-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:04:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316f88f4-85fc-4467-a53d-48eab36f10f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"error","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"debug","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46486","PortSpecifier":{"PortValue":46486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46486","PortSpecifier":{"PortValue":46486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847864,"nanos":214670781},"http":{"id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/auth-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda2e060-3f99-42f9-81ea-7c2bb08bfe59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45450","PortSpecifier":{"PortValue":45450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45450","PortSpecifier":{"PortValue":45450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847864,"nanos":250446157},"http":{"id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/auth-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d1fa16-9bdf-40ad-b1c8-085423ef89c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46498","PortSpecifier":{"PortValue":46498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46498","PortSpecifier":{"PortValue":46498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847864,"nanos":293089689},"http":{"id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RRwLTcBgjDO4qtuE_UZUR9pnTqNSNblztpZf3ZK4h5LX0DfK9sTHl7bmSJh2"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RRwLTcBgjDO4qtuE_UZUR9pnTqNSNblztpZf3ZK4h5LX0DfK9sTHl7bmSJh2\"}"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"178ce011-4d3a-42ea-ba54-a16d236a0f9a","keyName":"e2e-auth-iso-a-6c539b","subscription":"e2e-auth-iso-0b65fd","tenant":"e2e-shared-a-fd1be5","userId":"178ce011-4d3a-42ea-ba54-a16d236a0f9a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/auth-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0b65fd"}
{"level":"info","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1be91f75-2357-4a40-9b75-c84036eaf3fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a8fdb37fd8c20890170c1fffe1e0e0a3ebd4c50e52faa9f94bb651581ca34b"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8f967d84e4ce1e3548c7cea1317f92d98cae6e41e8bdca4baf87855caadfec1"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/741f7a21fefc121c26fa9bb89ccefef5a2d02480b15340e206a8fe72e34a46ff"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3e79105508a4f986b4cadafae5f2638feed24cd8f18731330d4e36aa18cd838"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d68a40c0aac595ad9de478c57ec53b70b54459529bf465126fd71bcba77227fa"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a4928a8e5a581c0746b68eddf0a28896cabb38b9045fe7ced48c988565ee72c"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f59d7b6470d13243e7e449f2b4053e66e6fc332f3996dda3fa9805861647220c"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be7992fe1a28f40f116d5f8738d809e88972d10d586cb0f9a6d75e4377231ae4"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f12a070dce88d80fd744106e3f159cdc1bd9980d1ee5540dceab17a89965db5"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eebefb4e1d9c206535a65c4f83ff3aeea2e5fd117770acaf61c500e97ee7f35"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8e3378f14e0b889a57357bf3fa9cf8b1a1bd902ab4b9585ff3cffd8ef4497ad"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1e8cb69c8310aea31f1406255c6e7e0ce69b60abe4a766c3d76f1174ed071bd"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00f029fdbf1a4d724f017ecfdc8bb93cb64cf7a93513d612be5acfbcf475e819"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/796449f07d506251119f0ca589c58facdf2d178d4476b38d493da2a5bcb7930c"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90387197cbc7a011fb5a33140f04f5e3a70e3e94e49d7e0f7bb62dce04172cb"}
{"level":"info","ts":"2026-07-23T23:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc7ea0059eb20c184987fa929277650e65383048703083df047315b2ca7ac5e9"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"error","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998"}
{"level":"error","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998"}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"}
{"level":"error","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"}
{"level":"error","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9"}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2"}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84060e524b041ca587b687688b0fbee4c5be9dd2ecc4575e8d859a07e0a98202"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c70b53c77c32e38b9044a8cc622fdb2b08278add560c487f85af6f9da39ee717"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84060e524b041ca587b687688b0fbee4c5be9dd2ecc4575e8d859a07e0a98202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84060e524b041ca587b687688b0fbee4c5be9dd2ecc4575e8d859a07e0a98202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c790df440e19e4f96eb4b6cd954542837674d2bc41f25527079966e6a90fe91"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84060e524b041ca587b687688b0fbee4c5be9dd2ecc4575e8d859a07e0a98202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c70b53c77c32e38b9044a8cc622fdb2b08278add560c487f85af6f9da39ee717","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c70b53c77c32e38b9044a8cc622fdb2b08278add560c487f85af6f9da39ee717"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c70b53c77c32e38b9044a8cc622fdb2b08278add560c487f85af6f9da39ee717","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c790df440e19e4f96eb4b6cd954542837674d2bc41f25527079966e6a90fe91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c790df440e19e4f96eb4b6cd954542837674d2bc41f25527079966e6a90fe91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807e9a372dcc3f15345aff022c3ce9f5eb4ba0f0579212c80ff35faa47cf256b"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718e7a7fedeb709a82ed3f81380f435adb35f0930b0dcbb20dbc30e325d8d0c0"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c790df440e19e4f96eb4b6cd954542837674d2bc41f25527079966e6a90fe91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84060e524b041ca587b687688b0fbee4c5be9dd2ecc4575e8d859a07e0a98202"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c70b53c77c32e38b9044a8cc622fdb2b08278add560c487f85af6f9da39ee717"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c790df440e19e4f96eb4b6cd954542837674d2bc41f25527079966e6a90fe91"}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807e9a372dcc3f15345aff022c3ce9f5eb4ba0f0579212c80ff35faa47cf256b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["807e9a372dcc3f15345aff022c3ce9f5eb4ba0f0579212c80ff35faa47cf256b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2"}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807e9a372dcc3f15345aff022c3ce9f5eb4ba0f0579212c80ff35faa47cf256b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718e7a7fedeb709a82ed3f81380f435adb35f0930b0dcbb20dbc30e325d8d0c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["718e7a7fedeb709a82ed3f81380f435adb35f0930b0dcbb20dbc30e325d8d0c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807e9a372dcc3f15345aff022c3ce9f5eb4ba0f0579212c80ff35faa47cf256b"}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718e7a7fedeb709a82ed3f81380f435adb35f0930b0dcbb20dbc30e325d8d0c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718e7a7fedeb709a82ed3f81380f435adb35f0930b0dcbb20dbc30e325d8d0c0"}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84060e524b041ca587b687688b0fbee4c5be9dd2ecc4575e8d859a07e0a98202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c70b53c77c32e38b9044a8cc622fdb2b08278add560c487f85af6f9da39ee717","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c790df440e19e4f96eb4b6cd954542837674d2bc41f25527079966e6a90fe91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"807e9a372dcc3f15345aff022c3ce9f5eb4ba0f0579212c80ff35faa47cf256b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718e7a7fedeb709a82ed3f81380f435adb35f0930b0dcbb20dbc30e325d8d0c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847939,"nanos":611058357},"http":{"id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/sub-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5e6597-dcba-41c6-b611-070eb3350cc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57602","PortSpecifier":{"PortValue":57602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2577f7f0-ff65-484b-893b-0e096a1d1244","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57602","PortSpecifier":{"PortValue":57602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847939,"nanos":654270965},"http":{"id":"2577f7f0-ff65-484b-893b-0e096a1d1244","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/sub-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2577f7f0-ff65-484b-893b-0e096a1d1244","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58920","PortSpecifier":{"PortValue":58920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58920","PortSpecifier":{"PortValue":58920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847939,"nanos":713952446},"http":{"id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","method":"GET","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LlM3INT1EX8VzHUy_DAzhrP1t0U78TaObBA13bMe8nM1ajts1o8QU3x9H7Z7"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LlM3INT1EX8VzHUy_DAzhrP1t0U78TaObBA13bMe8nM1ajts1o8QU3x9H7Z7\"}"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12216eca-7a7a-4729-8365-22f022305aba","keyName":"e2e-sub-iso-e53a26","subscription":"e2e-a-only-43ef35","tenant":"e2e-shared-a-fd1be5","userId":"12216eca-7a7a-4729-8365-22f022305aba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/sub-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-43ef35"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff822382-6fe1-4460-a7a2-f9a0d009f3ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57606","PortSpecifier":{"PortValue":57606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2695b850-31c1-404a-aef7-d14b19e3d21e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57606","PortSpecifier":{"PortValue":57606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847939,"nanos":752856273},"http":{"id":"2695b850-31c1-404a-aef7-d14b19e3d21e","method":"GET","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aWqxmlzzO2W7arrQ_sQe91OxfPvtjsN29Zr6Cv5hLZUB5Ib8m9ioCYxUip2h"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aWqxmlzzO2W7arrQ_sQe91OxfPvtjsN29Zr6Cv5hLZUB5Ib8m9ioCYxUip2h\"}"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59b24da0-07e9-40f8-9769-45b5216ca2fc","keyName":"e2e-sub-iso-82b158","subscription":"e2e-b-only-43ef35","tenant":"e2e-shared-b-159535","userId":"59b24da0-07e9-40f8-9769-45b5216ca2fc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/sub-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-43ef35"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2695b850-31c1-404a-aef7-d14b19e3d21e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58190","PortSpecifier":{"PortValue":58190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58190","PortSpecifier":{"PortValue":58190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847960,"nanos":516165298},"http":{"id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/sub-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80bd7fc6-c9a7-4dc4-84d0-0c2cde9de49e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37010","PortSpecifier":{"PortValue":37010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37010","PortSpecifier":{"PortValue":37010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847960,"nanos":555351920},"http":{"id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/sub-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af9adfb7-9a53-4387-8efc-b936c7102ff2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58196","PortSpecifier":{"PortValue":58196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58196","PortSpecifier":{"PortValue":58196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847960,"nanos":590712962},"http":{"id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aBnCRwOdHviNlBzN_lxbWJx5na4HBneWw89uml7xaBxi8Mom485bMMgrNza1"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aBnCRwOdHviNlBzN_lxbWJx5na4HBneWw89uml7xaBxi8Mom485bMMgrNza1\"}"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0300009e-b2fc-46ea-b1f4-95cd6a4d3484","keyName":"e2e-sub-iso-daf785","subscription":"e2e-shared-sub-ac82b1","tenant":"e2e-shared-a-fd1be5","userId":"0300009e-b2fc-46ea-b1f4-95cd6a4d3484","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/sub-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ac82b1"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ae22999-348e-47ae-a5af-5c5b03d49d1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f332ac13-8910-427f-a3fd-954736844c5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37014","PortSpecifier":{"PortValue":37014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f332ac13-8910-427f-a3fd-954736844c5f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f332ac13-8910-427f-a3fd-954736844c5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37014","PortSpecifier":{"PortValue":37014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784847960,"nanos":644468014},"http":{"id":"f332ac13-8910-427f-a3fd-954736844c5f","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kp0hJXmwhT5fNsk1_8J7Q3oipAumDdfZrNoQlFZu8waCyQGkIYQpjbgZbgJ3"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kp0hJXmwhT5fNsk1_8J7Q3oipAumDdfZrNoQlFZu8waCyQGkIYQpjbgZbgJ3\"}"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c07db874-9800-4f14-a414-72ab6a4be3c7","keyName":"e2e-sub-iso-edfff8","subscription":"e2e-shared-sub-ac82b1","tenant":"e2e-shared-b-159535","userId":"c07db874-9800-4f14-a414-72ab6a4be3c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f332ac13-8910-427f-a3fd-954736844c5f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/sub-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ac82b1"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f332ac13-8910-427f-a3fd-954736844c5f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f332ac13-8910-427f-a3fd-954736844c5f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f332ac13-8910-427f-a3fd-954736844c5f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3301f8e5595e506cfb681db5e40011245276d5f7ce202ac656c10b8abd82c2f0"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88dbe389e4ea05042ffc7c979034ef23be638deba37b1178b308f2fabab07de9"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cf13ea3dc86b2214c80d07838a91073575e2d058a068b8127496b2ddaebca3c"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/734a08fa2f796cedd5126b9d7f00f72436634f2794eddf81a191b4c7568c2956"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c790df440e19e4f96eb4b6cd954542837674d2bc41f25527079966e6a90fe91"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c70b53c77c32e38b9044a8cc622fdb2b08278add560c487f85af6f9da39ee717"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/300604445c36be587b50a8f2ff84b9710d94494bb93a26658e67dc688cfed7b9"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84060e524b041ca587b687688b0fbee4c5be9dd2ecc4575e8d859a07e0a98202"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1801270f3f79b26bed2ae7c4c4bfd18ba963c73d0d1861fee0e8157dea5da37b"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afd65cdcedafedd3e19ea8f36d2069b8ebb11e7df72b837064663cd607c04da6"}
{"level":"info","ts":"2026-07-23T23:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e71aa8323a3875243b72ef2d0c2adbb35c3d14e032b1a2168ddeda5f389659a"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/807e9a372dcc3f15345aff022c3ce9f5eb4ba0f0579212c80ff35faa47cf256b"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f478f78328de83d87b2ad894ecf9ccaefc44547173a51f8a6030b96b5ed6cf2"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/718e7a7fedeb709a82ed3f81380f435adb35f0930b0dcbb20dbc30e325d8d0c0"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d5563fc31e3a285aefa12d12f4d895527582ecf220e7cd3d17c5f775afd7998"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24c60bae09d15f3f42327fc0b8b79298a1530f970be43730a11df82fae059025"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"info","ts":"2026-07-23T23:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"debug","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707"}
{"level":"info","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474"}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f"}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35788","PortSpecifier":{"PortValue":35788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35788","PortSpecifier":{"PortValue":35788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848018,"nanos":831218487},"http":{"id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d774e1be-ea17-4891-a9e8-d816b2ba86e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54862","PortSpecifier":{"PortValue":54862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"faf3ed8e-c376-9ece-8960-ca6059de7747","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54862","PortSpecifier":{"PortValue":54862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848018,"nanos":872270838},"http":{"id":"faf3ed8e-c376-9ece-8960-ca6059de7747","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faf3ed8e-c376-9ece-8960-ca6059de7747","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35802","PortSpecifier":{"PortValue":35802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"593a188d-e61c-40e4-8e9c-a25108c906a3","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35802","PortSpecifier":{"PortValue":35802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848018,"nanos":912735781},"http":{"id":"593a188d-e61c-40e4-8e9c-a25108c906a3","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7\"}"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","subscription":"e2e-rate-iso-a-2ca1d6","tenant":"e2e-shared-a-fd1be5","userId":"014fb81b-1cba-4b21-9825-224a2e621f69","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-2ca1d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2ca1d6"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","selected_subscription":"e2e-rate-iso-a-2ca1d6","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-2ca1d6@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593a188d-e61c-40e4-8e9c-a25108c906a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35806","PortSpecifier":{"PortValue":35806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66f0e818-6629-415c-be5c-ad13d0e76391","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35806","PortSpecifier":{"PortValue":35806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848019,"nanos":994340137},"http":{"id":"66f0e818-6629-415c-be5c-ad13d0e76391","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7"}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7\"}"}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","subscription":"e2e-rate-iso-a-2ca1d6","tenant":"e2e-shared-a-fd1be5","userId":"014fb81b-1cba-4b21-9825-224a2e621f69","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-2ca1d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2ca1d6"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","selected_subscription":"e2e-rate-iso-a-2ca1d6","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-2ca1d6@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f0e818-6629-415c-be5c-ad13d0e76391","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"773821f1-9e66-4171-9443-6000a37cf5da","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848021,"nanos":32002444},"http":{"id":"773821f1-9e66-4171-9443-6000a37cf5da","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18xhWSs3u1vMr3Kol_1fGI3fLiyyej7W6CbS42R5ml0VRPQQEkmDOdGIpkmA7\"}"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","subscription":"e2e-rate-iso-a-2ca1d6","tenant":"e2e-shared-a-fd1be5","userId":"014fb81b-1cba-4b21-9825-224a2e621f69","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-2ca1d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"773821f1-9e66-4171-9443-6000a37cf5da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2ca1d6"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773821f1-9e66-4171-9443-6000a37cf5da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014fb81b-1cba-4b21-9825-224a2e621f69","keyName":"e2e-rate-a-2ca1d6","selected_subscription":"e2e-rate-iso-a-2ca1d6","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-2ca1d6@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2ca1d6","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773821f1-9e66-4171-9443-6000a37cf5da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773821f1-9e66-4171-9443-6000a37cf5da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38876","PortSpecifier":{"PortValue":38876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38876","PortSpecifier":{"PortValue":38876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848034,"nanos":27443108},"http":{"id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b63f2dd-0e53-4c7a-9a4b-d1f63785c394","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58974","PortSpecifier":{"PortValue":58974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58974","PortSpecifier":{"PortValue":58974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848034,"nanos":71554165},"http":{"id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07efefe4-5f84-463b-8a12-b0bb5f79e7c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38892","PortSpecifier":{"PortValue":38892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38892","PortSpecifier":{"PortValue":38892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848034,"nanos":109179492},"http":{"id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa\"}"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","subscription":"e2e-rate-iso-a-e7d40b","tenant":"e2e-shared-a-fd1be5","userId":"148b1318-320f-430b-a06e-1c5403901ef3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","selected_subscription":"e2e-rate-iso-a-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-e7d40b@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a3fcd69-a8d3-4912-92ec-87ee4cdd6e63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54320","PortSpecifier":{"PortValue":54320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec9917f1-a8db-4428-8d93-7abd626c7781","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54320","PortSpecifier":{"PortValue":54320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848035,"nanos":181645436},"http":{"id":"ec9917f1-a8db-4428-8d93-7abd626c7781","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa\"}"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","subscription":"e2e-rate-iso-a-e7d40b","tenant":"e2e-shared-a-fd1be5","userId":"148b1318-320f-430b-a06e-1c5403901ef3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","selected_subscription":"e2e-rate-iso-a-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-e7d40b@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9917f1-a8db-4428-8d93-7abd626c7781","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de83973e-f427-40fc-b8b1-9d07df674861","method":"POST","path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions","host":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848036,"nanos":219325439},"http":{"id":"de83973e-f427-40fc-b8b1-9d07df674861","method":"POST","headers":{":authority":"e2e-shared-a-fd1be5.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XmfYFNqE2VWyS6Eq_fksZuX4EVLqA2TDbGsOlCTFPK973QU3GgtS8GQ0Y3Aa\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","subscription":"e2e-rate-iso-a-e7d40b","tenant":"e2e-shared-a-fd1be5","userId":"148b1318-320f-430b-a06e-1c5403901ef3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\",\"requestedSubscription\":\"e2e-rate-iso-a-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fd1be5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de83973e-f427-40fc-b8b1-9d07df674861","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fd1be5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de83973e-f427-40fc-b8b1-9d07df674861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"148b1318-320f-430b-a06e-1c5403901ef3","keyName":"e2e-rate-a-e7d40b","selected_subscription":"e2e-rate-iso-a-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-a-fd1be5/e2e-rate-iso-a-e7d40b@ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fd1be5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e7d40b","namespace":"ai-tenant-e2e-shared-a-fd1be5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fd1be5/rate-test-model-fd1be5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de83973e-f427-40fc-b8b1-9d07df674861","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de83973e-f427-40fc-b8b1-9d07df674861","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60974","PortSpecifier":{"PortValue":60974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","method":"POST","path":"/ai-tenant-e2e-shared-b-159535/rate-test-model-159535/v1/completions","host":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60974","PortSpecifier":{"PortValue":60974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848036,"nanos":256543138},"http":{"id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","method":"POST","headers":{":authority":"e2e-shared-b-159535.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-159535/rate-test-model-159535/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-i0Bycmh5IPxmJm0a_af5M8tscq1ldDh343M676HS6kh8oWRbQQKLZYFureJ0"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-i0Bycmh5IPxmJm0a_af5M8tscq1ldDh343M676HS6kh8oWRbQQKLZYFureJ0\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a991655-7e56-4494-a0be-604b46d3b454","keyName":"e2e-rate-b-e7d40b","subscription":"e2e-rate-iso-b-e7d40b","tenant":"e2e-shared-b-159535","userId":"4a991655-7e56-4494-a0be-604b46d3b454","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\",\"requestedSubscription\":\"e2e-rate-iso-b-e7d40b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-159535.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-159535","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e7d40b","namespace":"ai-tenant-e2e-shared-b-159535","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-159535/rate-test-model-159535"}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-159535/rate-test-model-159535\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-159535/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e7d40b"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a991655-7e56-4494-a0be-604b46d3b454","keyName":"e2e-rate-b-e7d40b","selected_subscription":"e2e-rate-iso-b-e7d40b","selected_subscription_key":"ai-tenant-e2e-shared-b-159535/e2e-rate-iso-b-e7d40b@ai-tenant-e2e-shared-b-159535/rate-test-model-159535","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-159535","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e7d40b","namespace":"ai-tenant-e2e-shared-b-159535","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-159535/rate-test-model-159535"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13da4ef3-222b-4aad-aa46-a60a63e1cb42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0abfaea14e71ca89a57d11e9aa8df335d31747de25ec4ca0c30ad8cfe21a3058"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1d55f77490b2edc28f1e8d8d0b97d452c94d6bc9b7802088e7740fa94c4ab7"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a46c54993dfd258c143b9af88302af42267c332052e9ef6dacd037f4edbb70e"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a259c038b6c58e1b048eb932779201c00dddee789945ffe79412674b4910a1a3"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23a2d2c155f9aa1fb2f58e1218cb01c631248753d24e6bea6cd2661da5f08104"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09fbc3b032e0f9b9fcefd96e2b49f229a656330dc4b3a18550d785ed0916857f"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6e2059af4ab8a06aea3e68107de5bf7b8b1427059f3a78d4e230d2bdaf5c3d9"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b1fcca0bedce3a87aca4841ab429eb2b19ff565f2311750ea055faf6a78474"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f29c60dc50587ea1bd2befb1dd3a2af6dd8fb5a321d9cdcf2b3a572740d2cba2"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfc28ca5cfeb2d12fbc61d7e0dec47c3eaaac4ef99c73defe5050fbe05284337"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e01c92a2855c7c1f0209803fc91a35e60df151366f6498f8ad83b542cde4707"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebcbed0efad22fa8cc8c4883f377fb69e68794eadc57a1b35e7e2fc146ad533"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aaef8af2fa1078011516f441c9d071ad3963d56077fdcaac8e1ae83263664b1"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dad4f043599a4407177da591e952cf0fe36adf15627f32afb78d48d0c7380fb3"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edb7c5a9d42e355480de784d6956916a383e796fd1a1d218c0010a0ec07925c6"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1524a81155e42f1e545fe506980dff76a4017087fd8e449aa3b73683c7a55738"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/721630179e86d8cd1feb6bb4453d386f2ae92e8ad2c7c5cc8beaed98e699ef41"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72b9a589f2289e7ef0d8d875702dfb6598bc573d589055702a534a3b8f4d1561"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca3571f2deade5c3bfe3cc464a273e428824ccc201fde59917bfba9d64a91f7"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8a6190dfbb2f23d78b3cd2b198cee910c2e04d9470c54ce310c6fdaab13004"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25bf2f178592efc85702cc39d15fb70a4f71865e8b079390846f7f33bf3b99eb"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094746bac51812dc12f5a8799c521370b347c520e071302e9579649dd666e6a4"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60da44b87694506ba52a821d62c5c811523de19291f07fd6dce3f72937a948a2"}
{"level":"info","ts":"2026-07-23T23:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22d3ca19b6daa1b04b2172e4e4c539b6e48f2172b51d42ad5e9e31dcd1c05177"}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848103,"nanos":205141515},"http":{"id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","method":"POST","headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5d5413-a573-4ca3-8317-a51637ac2e5a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42962","PortSpecifier":{"PortValue":42962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a578b66-3c28-40c5-881e-d11578104a82","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42962","PortSpecifier":{"PortValue":42962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848103,"nanos":257109678},"http":{"id":"3a578b66-3c28-40c5-881e-d11578104a82","method":"POST","headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1pg1MOtLBEkACx9o_JIqukyl09JiybEdqZvlzGkifEdR3ueNsP2XD2egJ144"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1pg1MOtLBEkACx9o_JIqukyl09JiybEdqZvlzGkifEdR3ueNsP2XD2egJ144\"}"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3ce00a1-03fa-4218-8540-31cb4227ad2b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a3ce00a1-03fa-4218-8540-31cb4227ad2b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a578b66-3c28-40c5-881e-d11578104a82","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a578b66-3c28-40c5-881e-d11578104a82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a3ce00a1-03fa-4218-8540-31cb4227ad2b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a578b66-3c28-40c5-881e-d11578104a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:08:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a578b66-3c28-40c5-881e-d11578104a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"info","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"info","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T23:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"error","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T23:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55614","PortSpecifier":{"PortValue":55614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55614","PortSpecifier":{"PortValue":55614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848145,"nanos":200407500},"http":{"id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","method":"POST","headers":{":authority":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"]}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7c136c80699f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a0c37a7c-f2aa-493f-876a-0c10ac485241"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4d0aaf8b-38d5-4501-a098-6a81a102f7f6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4b3ef9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1e9fbf-eb2b-4744-a416-9b1be2921587","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55630","PortSpecifier":{"PortValue":55630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","method":"POST","path":"/ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9/v1/chat/completions","host":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55630","PortSpecifier":{"PortValue":55630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784848147,"nanos":264462056},"http":{"id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","method":"POST","headers":{":authority":"e2e-ipp-a-4b3ef9.apps.2b4c1b87-f47b-4e92-9a59-7c136c80699f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UBks05pZlIhcZL9E_dChdJYDUuWV6MHhpTxSPQDewpZj8dJDAoTe9GlRTkgi"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UBks05pZlIhcZL9E_dChdJYDUuWV6MHhpTxSPQDewpZj8dJDAoTe9GlRTkgi\"}"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5808985a-80f8-498a-b3eb-2e1b258c5010","keyName":"e2e-ipp-4b3ef9","subscription":"ipp-route-4b3ef9-sub","tenant":"e2e-ipp-a-4b3ef9","userId":"5808985a-80f8-498a-b3eb-2e1b258c5010","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9\",\"requestedSubscription\":\"ipp-route-4b3ef9-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4b3ef9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-4b3ef9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4b3ef9-sub","namespace":"ai-tenant-e2e-ipp-a-4b3ef9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9"}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4b3ef9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-4b3ef9-sub"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5808985a-80f8-498a-b3eb-2e1b258c5010","keyName":"e2e-ipp-4b3ef9","selected_subscription":"ipp-route-4b3ef9-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9-sub@ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-4b3ef9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4b3ef9-sub","namespace":"ai-tenant-e2e-ipp-a-4b3ef9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4b3ef9/ipp-route-4b3ef9"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T23:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f266d9f6-ca38-4c33-bdb4-5068f17b38f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T23:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71c15ca63f297538bb382dfdb5600fa1611a5474592d2562b161f7ef0b6c4429"}
{"level":"info","ts":"2026-07-23T23:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed7b57b1d01abe45b5dab9e6dac4324b0f4840f5a4bb0f85a11be6bb15935572"}
{"level":"info","ts":"2026-07-23T23:10:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f3475177a9aac11a3443ac9717448aca0dcc5f45e442992e007afa3fd112bf3"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d054a5d88c739e3aa0db3017f5fc4be2a4697bf6b87ee774da899d9afdf0d754"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11364461fe1f69dca6c286dab2016568b8d29005dbd71833a8eb9601b35f66f5"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb275fcd56913a3b8b369ab26525a43f564966fd8813a176b38b742cd75327d0"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/236ef2eaf6acc02c3fa5e53e0f87cb252756feda39532b017f369829187dcc16"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49c2ee62c6e4a3065f1945d618f9062179188a9d390003d1abdc315a5801e7ed"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a55de145d4dddc06c42a36015de453eaba493ccc9b87e2630dac807857b4944"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e2d49c17381b0a77da273808ef771f699b032685c34f386d49ac5e228f798ae"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99f1fac6e39fbc659667de35066ff6549aaab506ba088aa0a8fbc5781c6d3880"}
{"level":"info","ts":"2026-07-23T23:10:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b44fbb1d4f576387be8ce02fe7160393286ccbe829c441636e5a007011ea41"}