--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbf960a04790a0a5236fd3c30a492970b74baa800f5f5e2633d43cc8568650e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbf960a04790a0a5236fd3c30a492970b74baa800f5f5e2633d43cc8568650e2"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf"}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"}
{"level":"error","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616"}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:50:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"}
{"level":"info","ts":"2026-07-06T18:50:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616"}
{"level":"info","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"193139ad-1b20-403f-ab97-3d87e7534428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55330","PortSpecifier":{"PortValue":55330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"193139ad-1b20-403f-ab97-3d87e7534428","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"193139ad-1b20-403f-ab97-3d87e7534428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55330","PortSpecifier":{"PortValue":55330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783363825,"nanos":948798502},"http":{"id":"193139ad-1b20-403f-ab97-3d87e7534428","method":"POST","headers":{":authority":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"193139ad-1b20-403f-ab97-3d87e7534428","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"193139ad-1b20-403f-ab97-3d87e7534428","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"193139ad-1b20-403f-ab97-3d87e7534428","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cdf12fc24b4e839e3c5ea280abb1128ab8ef9b71d4205fc00f9e26f8bcd6f02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"193139ad-1b20-403f-ab97-3d87e7534428","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"193139ad-1b20-403f-ab97-3d87e7534428","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"193139ad-1b20-403f-ab97-3d87e7534428","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-203de8/test-model-203de8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"193139ad-1b20-403f-ab97-3d87e7534428","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"193139ad-1b20-403f-ab97-3d87e7534428","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"193139ad-1b20-403f-ab97-3d87e7534428","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"193139ad-1b20-403f-ab97-3d87e7534428","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:50:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"193139ad-1b20-403f-ab97-3d87e7534428","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49545172-5549-46ba-9c12-57307ee5c15f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60048","PortSpecifier":{"PortValue":60048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49545172-5549-46ba-9c12-57307ee5c15f","method":"POST","path":"/ai-tenant-e2e-inf-a-203de8/test-model-203de8/v1/chat/completions","host":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49545172-5549-46ba-9c12-57307ee5c15f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60048","PortSpecifier":{"PortValue":60048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783363830,"nanos":29474931},"http":{"id":"49545172-5549-46ba-9c12-57307ee5c15f","method":"POST","headers":{":authority":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-203de8/test-model-203de8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SWbFmhkcGtHAoRDX_PTnEi2attF5CscUVjLy1iEtq8tU1sepTlV4FeQ6Xb2S"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-203de8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SWbFmhkcGtHAoRDX_PTnEi2attF5CscUVjLy1iEtq8tU1sepTlV4FeQ6Xb2S\"}"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-203de8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ba07543-7e6e-48b7-b407-8087c25c64a7","keyName":"e2e-tenant-inference-203de8","subscription":"test-model-203de8-sub","tenant":"e2e-inf-a-203de8","userId":"7ba07543-7e6e-48b7-b407-8087c25c64a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-203de8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-203de8/test-model-203de8\",\"requestedSubscription\":\"test-model-203de8-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-203de8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-203de8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-203de8-sub","namespace":"ai-tenant-e2e-inf-a-203de8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49545172-5549-46ba-9c12-57307ee5c15f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-203de8/test-model-203de8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-203de8-sub"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49545172-5549-46ba-9c12-57307ee5c15f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ba07543-7e6e-48b7-b407-8087c25c64a7","keyName":"e2e-tenant-inference-203de8","selected_subscription":"test-model-203de8-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-203de8/test-model-203de8-sub@ai-tenant-e2e-inf-a-203de8/test-model-203de8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-203de8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-203de8-sub","namespace":"ai-tenant-e2e-inf-a-203de8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49545172-5549-46ba-9c12-57307ee5c15f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49545172-5549-46ba-9c12-57307ee5c15f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60062","PortSpecifier":{"PortValue":60062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60062","PortSpecifier":{"PortValue":60062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783363830,"nanos":342473596},"http":{"id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","method":"POST","headers":{":authority":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4cdf12fc24b4e839e3c5ea280abb1128ab8ef9b71d4205fc00f9e26f8bcd6f02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-203de8.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-203de8/test-model-203de8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bfa230c-e5ea-448c-b90f-e7adf60bfeff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48358","PortSpecifier":{"PortValue":48358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","method":"POST","path":"/ai-tenant-e2e-inf-b-aea86e/test-model-aea86e/v1/chat/completions","host":"e2e-inf-b-aea86e.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48358","PortSpecifier":{"PortValue":48358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783363830,"nanos":383424867},"http":{"id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","method":"POST","headers":{":authority":"e2e-inf-b-aea86e.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-aea86e/test-model-aea86e/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BUCJCWYFeSaNnNNk_LkXMcSlu4Z4FfTqoJjloRlromDBkArpAa7jFTrjixVO"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-aea86e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BUCJCWYFeSaNnNNk_LkXMcSlu4Z4FfTqoJjloRlromDBkArpAa7jFTrjixVO\"}"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-aea86e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-aea86e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-aea86e.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-aea86e/test-model-aea86e/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T18:50:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cce9a9b1-dd31-447d-9ff1-14a1bda0a6bd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf586915ad616614fc896de04e2f34672d533fb807b5424a7b76bfb1b6048c5a"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbf960a04790a0a5236fd3c30a492970b74baa800f5f5e2633d43cc8568650e2"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/063df956e07541648d4a08d7c235db88f2a21f8f536bf4dab1b3f1e342fc5298"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad75b450ce504a735cf9b23b2495d344e853da5cb3cfd66647ae3ef90456d778"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0256850dbc3a346b3e0eed60c0e4ff7a0e881d98f8563a223eaa56086dce616"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82a874b39b05c7564088977780cb77ca14ca9b13e70c8fc3d96b51493f0aa6c2"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bed00458f5d830cccec956b0631cd999c21d2bbe091aa614281acda552d909e"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f672ab8324b62545a9317da22d6a91450c100dabd705d9448de422be2a075ac"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e68b2e2fabe98f7802645441ca18cb4e8e278d9a39d6555411b8c023cdafd41"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6fff4484e36a54db864c83af90b3868a06f1a77ce08ce25f6d0e5339ba1c0af"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4c327ca635f73ec3747dc92b0e79e54ae143ac910fc9f5208dec86a127a9303"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfa226fb55dfcf52a3a9dd57453d80e2e96613cb349ffa8747b22b13814e9daf"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c50ddd44c74e4e51daf11ceb85bd1cbf9081be8ac823143c91cc7a699b1fd9c2"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97893d46ea3cef1bf39e090cc78d3eefbe272d026589686bf1ad2cf779ace2ba"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8f410f94b78727a61b7deb5eec085a0cf85353472405f3712765a95876cacb3"}
{"level":"info","ts":"2026-07-06T18:50:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6ba5ac509cedda17ab4346b61974050590a03fa9c2b6e5735140e330c36cd5c"}
{"level":"info","ts":"2026-07-06T18:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cdf12fc24b4e839e3c5ea280abb1128ab8ef9b71d4205fc00f9e26f8bcd6f02"}
{"level":"info","ts":"2026-07-06T18:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae2123be62a6b374dfc8997a8f21a72927c0dc1458f92807d7654f2dc7609018"}
{"level":"info","ts":"2026-07-06T18:51:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/888c988b5e1cdfd879a07ab01dc413deccc7fa3c9506c381f48ac26af99f98a5"}
{"level":"info","ts":"2026-07-06T18:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee0788405b5c34a5f4b18e7832991d2c301ff9bc0d6d177fef2585c5a9676ef0"}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285"}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285"}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"}
{"level":"info","ts":"2026-07-06T18:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285"}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47"}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47"}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47"}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439"}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439"}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:51:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439"}
{"level":"info","ts":"2026-07-06T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0711c3d04981085ab6e6c98e224b7a24a07279b167aea157b2f6652be2e2f31c"}
{"level":"info","ts":"2026-07-06T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/357642df3af4fc5a6a3eae18def74fcb95e73fe06831bfbf504f67045d5fe285"}
{"level":"info","ts":"2026-07-06T18:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05d42f96886741d0c5c94ba216d660f1f3a4bd762baadcca031b4b4efca1ee47"}
{"level":"info","ts":"2026-07-06T18:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d53ff235844aa688016526c1a42d198aa3d49c66e846baf12633e8a69478c439"}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"error","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"}
{"level":"info","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299"}
{"level":"info","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"}
{"level":"info","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"}
{"level":"info","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"}
{"level":"error","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"info","ts":"2026-07-06T18:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b"}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"}
{"level":"debug","ts":"2026-07-06T18:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50914","PortSpecifier":{"PortValue":50914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50914","PortSpecifier":{"PortValue":50914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364005,"nanos":402280414},"http":{"id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e605fd-8cd8-4ed1-b738-9d168a5c81f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43218","PortSpecifier":{"PortValue":43218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"488ab69b-9299-4331-9566-850b9cf5f6a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43218","PortSpecifier":{"PortValue":43218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364005,"nanos":483332101},"http":{"id":"488ab69b-9299-4331-9566-850b9cf5f6a0","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"488ab69b-9299-4331-9566-850b9cf5f6a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50922","PortSpecifier":{"PortValue":50922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","method":"GET","path":"/maas-api/v1/api-keys/1ea8bce5-5f68-4767-9049-fb82cb15d671","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50922","PortSpecifier":{"PortValue":50922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364005,"nanos":570604814},"http":{"id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","method":"GET","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ea8bce5-5f68-4767-9049-fb82cb15d671",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1ea8bce5-5f68-4767-9049-fb82cb15d671",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72ec49d1-1a42-43c3-a2e1-69cc3918092e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43228","PortSpecifier":{"PortValue":43228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bb8b850-90dc-4755-971c-7fc5987be38e","method":"GET","path":"/maas-api/v1/api-keys/c6cd1e70-0af6-439d-aab4-b8ed0460fd5c","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43228","PortSpecifier":{"PortValue":43228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364005,"nanos":605485924},"http":{"id":"6bb8b850-90dc-4755-971c-7fc5987be38e","method":"GET","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c6cd1e70-0af6-439d-aab4-b8ed0460fd5c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c6cd1e70-0af6-439d-aab4-b8ed0460fd5c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bb8b850-90dc-4755-971c-7fc5987be38e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39496","PortSpecifier":{"PortValue":39496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39496","PortSpecifier":{"PortValue":39496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364022,"nanos":814360762},"http":{"id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6756aa02-7bd3-4e84-8ea5-bfb4411ec906","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"313733d2-d564-469f-8d56-5ecb3b879098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42610","PortSpecifier":{"PortValue":42610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"313733d2-d564-469f-8d56-5ecb3b879098","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"313733d2-d564-469f-8d56-5ecb3b879098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42610","PortSpecifier":{"PortValue":42610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364022,"nanos":850877864},"http":{"id":"313733d2-d564-469f-8d56-5ecb3b879098","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"313733d2-d564-469f-8d56-5ecb3b879098","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"313733d2-d564-469f-8d56-5ecb3b879098","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"313733d2-d564-469f-8d56-5ecb3b879098","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"313733d2-d564-469f-8d56-5ecb3b879098","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"313733d2-d564-469f-8d56-5ecb3b879098","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"313733d2-d564-469f-8d56-5ecb3b879098","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"313733d2-d564-469f-8d56-5ecb3b879098","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"313733d2-d564-469f-8d56-5ecb3b879098","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"313733d2-d564-469f-8d56-5ecb3b879098","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"313733d2-d564-469f-8d56-5ecb3b879098","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"313733d2-d564-469f-8d56-5ecb3b879098","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39512","PortSpecifier":{"PortValue":39512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39512","PortSpecifier":{"PortValue":39512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364022,"nanos":892330668},"http":{"id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","method":"GET","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-W459u4QQjsOc6hrR_gXpI7eGKRkdquu1qhjWuz3CEcYmew3iarWw0F24C3MH"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-W459u4QQjsOc6hrR_gXpI7eGKRkdquu1qhjWuz3CEcYmew3iarWw0F24C3MH\"}"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec769754-f999-4b3e-a565-71edc744272c","keyName":"e2e-auth-iso-a-a564ba","subscription":"e2e-auth-iso-094729","tenant":"e2e-shared-a-8c615a","userId":"ec769754-f999-4b3e-a565-71edc744272c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-094729"}
{"level":"info","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfd2a3c4-ac53-4974-a53a-894c420dadac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40290","PortSpecifier":{"PortValue":40290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40290","PortSpecifier":{"PortValue":40290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364040,"nanos":76601956},"http":{"id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6400e61-12c5-45c0-b2ea-fec336f8f896","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46348","PortSpecifier":{"PortValue":46348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46348","PortSpecifier":{"PortValue":46348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364040,"nanos":114709858},"http":{"id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8372b306-2220-4a69-9fff-b4ece6dcdcef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46360","PortSpecifier":{"PortValue":46360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af8e39cb-68bd-46bd-a2de-0a3061788645","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46360","PortSpecifier":{"PortValue":46360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364040,"nanos":158460856},"http":{"id":"af8e39cb-68bd-46bd-a2de-0a3061788645","method":"GET","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KrWNTyLuySmpfhKP_lceqYQRuRppblrfVyVN1QQxtUOY3duZqsa7JPSzCTrd"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KrWNTyLuySmpfhKP_lceqYQRuRppblrfVyVN1QQxtUOY3duZqsa7JPSzCTrd\"}"}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T18:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8e39cb-68bd-46bd-a2de-0a3061788645","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54038","PortSpecifier":{"PortValue":54038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5325f40-c310-4841-a311-234ccf6b73e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54038","PortSpecifier":{"PortValue":54038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364055,"nanos":296600864},"http":{"id":"b5325f40-c310-4841-a311-234ccf6b73e0","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5325f40-c310-4841-a311-234ccf6b73e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56914","PortSpecifier":{"PortValue":56914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56914","PortSpecifier":{"PortValue":56914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364055,"nanos":334044474},"http":{"id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd81202e-88f5-4dc0-9314-dcec6d7b275c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54040","PortSpecifier":{"PortValue":54040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"206c5ee2-2477-462d-af34-a6355b0c5010","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54040","PortSpecifier":{"PortValue":54040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364055,"nanos":369810910},"http":{"id":"206c5ee2-2477-462d-af34-a6355b0c5010","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"206c5ee2-2477-462d-af34-a6355b0c5010","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56926","PortSpecifier":{"PortValue":56926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56926","PortSpecifier":{"PortValue":56926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364055,"nanos":406427268},"http":{"id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a121f6f2-8a99-4c8f-adb0-f30531ab0109","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44674","PortSpecifier":{"PortValue":44674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37a73dba-def7-4d63-9f49-8fa7678f0284","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44674","PortSpecifier":{"PortValue":44674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364070,"nanos":482582924},"http":{"id":"37a73dba-def7-4d63-9f49-8fa7678f0284","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37a73dba-def7-4d63-9f49-8fa7678f0284","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55502","PortSpecifier":{"PortValue":55502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55502","PortSpecifier":{"PortValue":55502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364070,"nanos":529867310},"http":{"id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6ad0087-db7c-4a7f-9ca8-d0e735b4a1ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae4ab5af-665b-4011-a660-b2850de482db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55514","PortSpecifier":{"PortValue":55514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae4ab5af-665b-4011-a660-b2850de482db","method":"GET","path":"/maas-api/v1/api-keys/26acf5cc-aab9-4351-870d-6a529b45f149","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae4ab5af-665b-4011-a660-b2850de482db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55514","PortSpecifier":{"PortValue":55514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364070,"nanos":565933068},"http":{"id":"ae4ab5af-665b-4011-a660-b2850de482db","method":"GET","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/26acf5cc-aab9-4351-870d-6a529b45f149",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae4ab5af-665b-4011-a660-b2850de482db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae4ab5af-665b-4011-a660-b2850de482db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae4ab5af-665b-4011-a660-b2850de482db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/26acf5cc-aab9-4351-870d-6a529b45f149",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4ab5af-665b-4011-a660-b2850de482db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4ab5af-665b-4011-a660-b2850de482db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4ab5af-665b-4011-a660-b2850de482db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae4ab5af-665b-4011-a660-b2850de482db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae4ab5af-665b-4011-a660-b2850de482db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae4ab5af-665b-4011-a660-b2850de482db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae4ab5af-665b-4011-a660-b2850de482db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae4ab5af-665b-4011-a660-b2850de482db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44690","PortSpecifier":{"PortValue":44690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","method":"GET","path":"/maas-api/v1/api-keys/26acf5cc-aab9-4351-870d-6a529b45f149","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44690","PortSpecifier":{"PortValue":44690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364070,"nanos":602746236},"http":{"id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","method":"GET","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/26acf5cc-aab9-4351-870d-6a529b45f149",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/26acf5cc-aab9-4351-870d-6a529b45f149",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce8e53ec-587b-44f2-a80c-ff45bcd986ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364087,"nanos":711766420},"http":{"id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc1a87c1-fa78-42d3-a133-0643f98308e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364087,"nanos":750683428},"http":{"id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/auth-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d61b80e-de86-4d8b-be4e-2c0826e60d82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35064","PortSpecifier":{"PortValue":35064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35064","PortSpecifier":{"PortValue":35064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364087,"nanos":790262958},"http":{"id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LUF5dyRViBvyxc3R_uQm8Dxn15tVpMbdXr2nRInPZ4wbsps8Z9Lrz9cAYP08"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LUF5dyRViBvyxc3R_uQm8Dxn15tVpMbdXr2nRInPZ4wbsps8Z9Lrz9cAYP08\"}"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4460d304-1ecd-449b-b0ba-c6e14e9cd21d","keyName":"e2e-auth-iso-a-b86c13","subscription":"e2e-auth-iso-6a307d","tenant":"e2e-shared-a-8c615a","userId":"4460d304-1ecd-449b-b0ba-c6e14e9cd21d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/auth-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6a307d"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f646332-7d6d-4bcd-9043-fab7796cc4fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:54:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98c61bc5fdff6aae24b335ac11549dbb83cab35ee1edf547c3b9117a2d45af3f"}
{"level":"info","ts":"2026-07-06T18:54:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7acf8e78d2f4839669d731ae9d7796e93c25a337c467c603cf88b5d67279f74"}
{"level":"info","ts":"2026-07-06T18:54:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60f4a12bb5eb3782e133e06d2e8d1ee5056d8d268450b61b6cdd38e9ddc95a7f"}
{"level":"info","ts":"2026-07-06T18:54:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60ca22d23a0792505905ff7f81e8e0057c01843ebb5ec4a0701182c204bd5fae"}
{"level":"info","ts":"2026-07-06T18:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b94442cf29e856708a01485b5940a77c033529a206ceb9b72d6cb09d5742ba3"}
{"level":"info","ts":"2026-07-06T18:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/972a303f64ab721faa6084909546eedc54ea7818d92c1909559bf2f55bc8353a"}
{"level":"info","ts":"2026-07-06T18:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/630779a49ab204aa5c2f58d1b9f59149ff717a7e1de7e64f27ef5967265fc299"}
{"level":"info","ts":"2026-07-06T18:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bc7e348913fe41bcdff4020ac9409f97878c131245b1cdd4b5b594a7f7524f8"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"error","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022"}
{"level":"debug","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70665f5a7e0995f858bb619814bac66ba8ff663b1aa94c305768ae0612ca43d5"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fde8e4f9471a8106782150454add8e41faba1ded9e5dfe3ae0030949a4f62903"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04bffc0506e80d391d756a024b99ed28b3171e7a82ab24b98f1f63da1941d99c"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63a4ba15c091a650ea6d0cf98cdf9b276815bf5a3a3d7dff188fc463b4679d42"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e58f941194ef86d368bc29e2b7be62daafa1efc58daaab000c572bbf6ef844"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a23e371b1397b64e9886bd045e1b66b13f662daa4827c53ecbd574614aa88a93"}
{"level":"debug","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f64f537fb72fea88207bb27580fa436d544a3ad9b818a74dcb1d8a82f2c30b8"}
{"level":"info","ts":"2026-07-06T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/226001be54ad927650d5f2a842c757df9d76fa7c6f504b1cc8666ade51f3a56b"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d"}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb"}
{"level":"error","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75"}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb"}
{"level":"info","ts":"2026-07-06T18:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75"}
{"level":"debug","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a"}
{"level":"debug","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"debug","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:55:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7"}
{"level":"error","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"}
{"level":"debug","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"info","ts":"2026-07-06T18:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87e8ded-eff2-4405-868e-707b8492980d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51622","PortSpecifier":{"PortValue":51622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d87e8ded-eff2-4405-868e-707b8492980d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87e8ded-eff2-4405-868e-707b8492980d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51622","PortSpecifier":{"PortValue":51622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364138,"nanos":102436925},"http":{"id":"d87e8ded-eff2-4405-868e-707b8492980d","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d87e8ded-eff2-4405-868e-707b8492980d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d87e8ded-eff2-4405-868e-707b8492980d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d87e8ded-eff2-4405-868e-707b8492980d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87e8ded-eff2-4405-868e-707b8492980d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87e8ded-eff2-4405-868e-707b8492980d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87e8ded-eff2-4405-868e-707b8492980d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/sub-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d87e8ded-eff2-4405-868e-707b8492980d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87e8ded-eff2-4405-868e-707b8492980d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87e8ded-eff2-4405-868e-707b8492980d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87e8ded-eff2-4405-868e-707b8492980d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87e8ded-eff2-4405-868e-707b8492980d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40972","PortSpecifier":{"PortValue":40972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0be8eb05-5006-467f-8858-e4a9d881ae45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40972","PortSpecifier":{"PortValue":40972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364138,"nanos":143037285},"http":{"id":"0be8eb05-5006-467f-8858-e4a9d881ae45","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/sub-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be8eb05-5006-467f-8858-e4a9d881ae45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51638","PortSpecifier":{"PortValue":51638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51638","PortSpecifier":{"PortValue":51638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364138,"nanos":204669970},"http":{"id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","method":"GET","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RKVwIlfzvsO6w0TZ_mujlaqeWG8ZvgDOkxJBxaxjRUyQS1VtobXQP9jaaj8h"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RKVwIlfzvsO6w0TZ_mujlaqeWG8ZvgDOkxJBxaxjRUyQS1VtobXQP9jaaj8h\"}"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02c18ebc-a846-4739-8b0a-14e5f4b08024","keyName":"e2e-sub-iso-ae512b","subscription":"e2e-a-only-1ca697","tenant":"e2e-shared-a-8c615a","userId":"02c18ebc-a846-4739-8b0a-14e5f4b08024","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/sub-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1ca697"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44e54b6-0398-4f91-a5e6-5a3f9169a76f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40984","PortSpecifier":{"PortValue":40984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40984","PortSpecifier":{"PortValue":40984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364138,"nanos":232677359},"http":{"id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","method":"GET","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19Fts2YTVmkiE475Q_r51udYwP18flUhGbPbTyBx5AtHQbxt7oXFWOPhjZUAN"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19Fts2YTVmkiE475Q_r51udYwP18flUhGbPbTyBx5AtHQbxt7oXFWOPhjZUAN\"}"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96e7e079-7b0a-4937-ba3d-4b309f62d727","keyName":"e2e-sub-iso-e4e715","subscription":"e2e-b-only-1ca697","tenant":"e2e-shared-b-b67177","userId":"96e7e079-7b0a-4937-ba3d-4b309f62d727","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/sub-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1ca697"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3428ddcb-8cc3-4d00-af25-20573e21eb75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5f35348-b056-43f1-8c38-574c51504361","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5f35348-b056-43f1-8c38-574c51504361","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5f35348-b056-43f1-8c38-574c51504361","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364149,"nanos":301176472},"http":{"id":"a5f35348-b056-43f1-8c38-574c51504361","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5f35348-b056-43f1-8c38-574c51504361","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5f35348-b056-43f1-8c38-574c51504361","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5f35348-b056-43f1-8c38-574c51504361","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5f35348-b056-43f1-8c38-574c51504361","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5f35348-b056-43f1-8c38-574c51504361","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5f35348-b056-43f1-8c38-574c51504361","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/sub-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5f35348-b056-43f1-8c38-574c51504361","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5f35348-b056-43f1-8c38-574c51504361","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5f35348-b056-43f1-8c38-574c51504361","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5f35348-b056-43f1-8c38-574c51504361","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5f35348-b056-43f1-8c38-574c51504361","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36292","PortSpecifier":{"PortValue":36292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36292","PortSpecifier":{"PortValue":36292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364149,"nanos":341233121},"http":{"id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/sub-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ec2958e-9022-4163-a5bb-2c2e295e9825","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364149,"nanos":390302106},"http":{"id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mblGGvSVDucWLrIy_WtVxw2tDVULLRLbsEr09ztLCJ3YXoOvTG8pvhFfsGrE"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mblGGvSVDucWLrIy_WtVxw2tDVULLRLbsEr09ztLCJ3YXoOvTG8pvhFfsGrE\"}"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18780d6a-5b27-4c45-b205-aa4c5e8759a2","keyName":"e2e-sub-iso-10676c","subscription":"e2e-shared-sub-862889","tenant":"e2e-shared-a-8c615a","userId":"18780d6a-5b27-4c45-b205-aa4c5e8759a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/sub-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-862889"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39961a25-2e94-49e9-91c1-24e3c0c1302c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36306","PortSpecifier":{"PortValue":36306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36306","PortSpecifier":{"PortValue":36306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364149,"nanos":424157462},"http":{"id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LqPUHSQjj8Ymciua_OexAcQzfn8euvaqbydRpeOaOauaOoC50gzAWSo1AhL3"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LqPUHSQjj8Ymciua_OexAcQzfn8euvaqbydRpeOaOauaOoC50gzAWSo1AhL3\"}"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27d5eea9-4c48-4714-8e8e-3f103ba89929","keyName":"e2e-sub-iso-052c75","subscription":"e2e-shared-sub-862889","tenant":"e2e-shared-b-b67177","userId":"27d5eea9-4c48-4714-8e8e-3f103ba89929","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/sub-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-862889"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4adb0fa1-69d8-4ee5-b956-036e84e10565","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/059bd36756b90fe8b1c8ee31cb6794ae40cd4b50d501da99c545c72ff5270ece"}
{"level":"info","ts":"2026-07-06T18:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/460b60f9cf6b2d9e50e076bc26b564dd8df7e2bcfefaaffedf3bb3973fb6a28a"}
{"level":"info","ts":"2026-07-06T18:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0383fb9c94ce493c514f6f34618f27d21c62a33c92df74e3bfd5a2f6e28a103a"}
{"level":"info","ts":"2026-07-06T18:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5a4af60bef05500e962d8d6c7df69352ff4e235d96f2d78f4a35adec11bdff6"}
{"level":"info","ts":"2026-07-06T18:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb31786cf631a972f9bbb4d7d3d2617418dbdb61e93f9a00b1bdf1d84926df7"}
{"level":"info","ts":"2026-07-06T18:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a1b8165dc03b6399b900f1c3ad7355f6ee6447ffe3b8fb1333cd840bbaa3df0"}
{"level":"info","ts":"2026-07-06T18:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb421464e077d8124fb648c6bef84bd2824aeb8df83fb5d21c54d86443814022"}
{"level":"info","ts":"2026-07-06T18:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cccd5878d8fe26e65e1074ef8711530a1a2f9f64644e0dfdd93d5d03c7a436cd"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/760bf824b7deaa6d6a0b01007722d3301a64ede6db7ab3a818e70b9dec466a75"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc019644cce5b39755ce79fd4815d9f2d88b6ab2908b56c709630dcaaafa4f6b"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96371c84d303e3ca4390303614f4f2a40045cf42e48e08ab04d1cc688da027dd"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d898d88d40ca35c8fa609766aa67175fa439ff1e271c774f0e5c245aeba457eb"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8554f47ff9db6ae7442a9d967dd5f56fed378c4ca5bf1a50562581e8ca156f23"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa669dd4b2af814767fed03faf09e299b8d07fecbb0b439a26d9c6514c38354a"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe670877cc6340ca243886c31e2587a7e2bd4c27d5699737057555be33f51cfc"}
{"level":"info","ts":"2026-07-06T18:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19a3c40fc7a5fbc079ca1a46b88c4fe414518353edcaee4b4697e52c9edde71d"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51816","PortSpecifier":{"PortValue":51816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51816","PortSpecifier":{"PortValue":51816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364235,"nanos":788525868},"http":{"id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40540","PortSpecifier":{"PortValue":40540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3097b2c3-323b-41f1-a8bb-52220fda1994","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40540","PortSpecifier":{"PortValue":40540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364235,"nanos":827422333},"http":{"id":"3097b2c3-323b-41f1-a8bb-52220fda1994","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515be33b-c973-4092-990b-137c22789e39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51828","PortSpecifier":{"PortValue":51828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"515be33b-c973-4092-990b-137c22789e39","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515be33b-c973-4092-990b-137c22789e39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51828","PortSpecifier":{"PortValue":51828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364235,"nanos":865269866},"http":{"id":"515be33b-c973-4092-990b-137c22789e39","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"515be33b-c973-4092-990b-137c22789e39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg\"}"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","subscription":"e2e-rate-iso-a-172a98","tenant":"e2e-shared-a-8c615a","userId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"515be33b-c973-4092-990b-137c22789e39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-172a98\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"515be33b-c973-4092-990b-137c22789e39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-172a98"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","selected_subscription":"e2e-rate-iso-a-172a98","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-172a98@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515be33b-c973-4092-990b-137c22789e39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515be33b-c973-4092-990b-137c22789e39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39074","PortSpecifier":{"PortValue":39074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5570b79-abd9-4dd2-ade9-86d2649df834","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39074","PortSpecifier":{"PortValue":39074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364236,"nanos":930724303},"http":{"id":"b5570b79-abd9-4dd2-ade9-86d2649df834","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg\"}"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","subscription":"e2e-rate-iso-a-172a98","tenant":"e2e-shared-a-8c615a","userId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-172a98\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-172a98"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","selected_subscription":"e2e-rate-iso-a-172a98","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-172a98@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39090","PortSpecifier":{"PortValue":39090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39090","PortSpecifier":{"PortValue":39090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364237,"nanos":969827075},"http":{"id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg\"}"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","subscription":"e2e-rate-iso-a-172a98","tenant":"e2e-shared-a-8c615a","userId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-172a98\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-172a98"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","selected_subscription":"e2e-rate-iso-a-172a98","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-172a98@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37010","PortSpecifier":{"PortValue":37010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21c37fdf-11f6-4615-9173-76494bf7e99a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37010","PortSpecifier":{"PortValue":37010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364253,"nanos":56883482},"http":{"id":"21c37fdf-11f6-4615-9173-76494bf7e99a","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53358","PortSpecifier":{"PortValue":53358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53358","PortSpecifier":{"PortValue":53358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364253,"nanos":118445757},"http":{"id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5257f70d-213b-4ba4-bc5c-ed975d405253","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364253,"nanos":151740470},"http":{"id":"5257f70d-213b-4ba4-bc5c-ed975d405253","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1\"}"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","subscription":"e2e-rate-iso-a-e9282d","tenant":"e2e-shared-a-8c615a","userId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","selected_subscription":"e2e-rate-iso-a-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-e9282d@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37028","PortSpecifier":{"PortValue":37028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37028","PortSpecifier":{"PortValue":37028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364254,"nanos":193342892},"http":{"id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1\"}"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","subscription":"e2e-rate-iso-a-e9282d","tenant":"e2e-shared-a-8c615a","userId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","selected_subscription":"e2e-rate-iso-a-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-e9282d@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37044","PortSpecifier":{"PortValue":37044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37044","PortSpecifier":{"PortValue":37044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364255,"nanos":241243141},"http":{"id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","subscription":"e2e-rate-iso-a-e9282d","tenant":"e2e-shared-a-8c615a","userId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","selected_subscription":"e2e-rate-iso-a-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-e9282d@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53366","PortSpecifier":{"PortValue":53366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","method":"POST","path":"/ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177/v1/completions","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53366","PortSpecifier":{"PortValue":53366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364255,"nanos":278503628},"http":{"id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-imLBWIYpjVKdmdTD_5NHNaAXy9Qcq9xiVtGOns7CUEPfOgI9pmWFjYwkpYQe"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-imLBWIYpjVKdmdTD_5NHNaAXy9Qcq9xiVtGOns7CUEPfOgI9pmWFjYwkpYQe\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"270724ee-d2bd-41e0-96ad-bfda390cf084","keyName":"e2e-rate-b-e9282d","subscription":"e2e-rate-iso-b-e9282d","tenant":"e2e-shared-b-b67177","userId":"270724ee-d2bd-41e0-96ad-bfda390cf084","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\",\"requestedSubscription\":\"e2e-rate-iso-b-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b67177","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e9282d","namespace":"ai-tenant-e2e-shared-b-b67177","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"270724ee-d2bd-41e0-96ad-bfda390cf084","keyName":"e2e-rate-b-e9282d","selected_subscription":"e2e-rate-iso-b-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-b-b67177/e2e-rate-iso-b-e9282d@ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b67177","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e9282d","namespace":"ai-tenant-e2e-shared-b-b67177","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"info","ts":"2026-07-06T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"info","ts":"2026-07-06T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}