--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191"}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"debug","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:40:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:40:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"info","ts":"2026-07-17T11:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8bce547c388fbe7daf76a2cc0ff2fa297975a291fdfb50080120182ff52fff"}
{"level":"info","ts":"2026-07-17T11:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b03d747591408a5365a620011f828a7eaa7d31f3b3e33d87a2d74a64308180"}
{"level":"info","ts":"2026-07-17T11:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed933877d7fe1a1edd98ddaf080308bd282a0367cbb4c3957fe7e2aff43f2d24"}
{"level":"info","ts":"2026-07-17T11:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df5505f7894c9e98a25341227b3d9de7dfcd850bda151a75f43adb90b53c38ee"}
{"level":"info","ts":"2026-07-17T11:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59525cfb470be9e9c721a3872d9d0450270435faf49c4f43042aa6344a9f4f2b"}
{"level":"info","ts":"2026-07-17T11:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d2971028ed19952d44c73fc55237c9ec4fa95c0ef11af9b55b01a74636166c6"}
{"level":"info","ts":"2026-07-17T11:41:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eab245da2d45da20499ffd70337963f1609b6730a53b0feec60cc6c0b110191"}
{"level":"info","ts":"2026-07-17T11:41:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d96bc049a09c8cedd4152ce8b10d908346759f78751541f89364e11d8650e2b"}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f"}
{"level":"error","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f"}
{"level":"info","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb"}
{"level":"error","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"}
{"level":"error","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86"}
{"level":"error","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86"}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb"}
{"level":"info","ts":"2026-07-17T11:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86"}
{"level":"info","ts":"2026-07-17T11:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"}
{"level":"debug","ts":"2026-07-17T11:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"error","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10"}
{"level":"error","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"error","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:43:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"error","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:43:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34296","PortSpecifier":{"PortValue":34296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1aeee9f-bec5-4894-b843-31cd84055955","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34296","PortSpecifier":{"PortValue":34296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288584,"nanos":807896062},"http":{"id":"c1aeee9f-bec5-4894-b843-31cd84055955","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1aeee9f-bec5-4894-b843-31cd84055955","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59044","PortSpecifier":{"PortValue":59044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59044","PortSpecifier":{"PortValue":59044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288584,"nanos":869816036},"http":{"id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53938224-0703-49a4-8eb5-eda7d2dcaf28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34310","PortSpecifier":{"PortValue":34310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","method":"GET","path":"/maas-api/v1/api-keys/11f88adb-2572-4d61-9d4d-265c82c40376","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34310","PortSpecifier":{"PortValue":34310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288584,"nanos":933583758},"http":{"id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","method":"GET","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11f88adb-2572-4d61-9d4d-265c82c40376",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11f88adb-2572-4d61-9d4d-265c82c40376",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cff855a1-2ab9-4bab-a935-c9f78184cc61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d707e15-db87-4308-a063-694a12363b30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59046","PortSpecifier":{"PortValue":59046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d707e15-db87-4308-a063-694a12363b30","method":"GET","path":"/maas-api/v1/api-keys/41554cd4-c952-4049-a877-1d7fc8c88f60","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d707e15-db87-4308-a063-694a12363b30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59046","PortSpecifier":{"PortValue":59046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288584,"nanos":970047007},"http":{"id":"0d707e15-db87-4308-a063-694a12363b30","method":"GET","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41554cd4-c952-4049-a877-1d7fc8c88f60",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d707e15-db87-4308-a063-694a12363b30","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d707e15-db87-4308-a063-694a12363b30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d707e15-db87-4308-a063-694a12363b30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/41554cd4-c952-4049-a877-1d7fc8c88f60",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d707e15-db87-4308-a063-694a12363b30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d707e15-db87-4308-a063-694a12363b30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d707e15-db87-4308-a063-694a12363b30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d707e15-db87-4308-a063-694a12363b30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d707e15-db87-4308-a063-694a12363b30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d707e15-db87-4308-a063-694a12363b30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d707e15-db87-4308-a063-694a12363b30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d707e15-db87-4308-a063-694a12363b30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56456","PortSpecifier":{"PortValue":56456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"982f440d-870e-4a3d-a8ad-ea98f9841516","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56456","PortSpecifier":{"PortValue":56456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288602,"nanos":388573286},"http":{"id":"982f440d-870e-4a3d-a8ad-ea98f9841516","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"982f440d-870e-4a3d-a8ad-ea98f9841516","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46066","PortSpecifier":{"PortValue":46066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46066","PortSpecifier":{"PortValue":46066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288602,"nanos":425680185},"http":{"id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10f02776-6be1-4d66-b5f9-397c81a3a4a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56458","PortSpecifier":{"PortValue":56458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56458","PortSpecifier":{"PortValue":56458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288602,"nanos":468456000},"http":{"id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","method":"GET","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZyoUoGPsHxLmEmp4_LWn1JhbyCTYg5hg9NxYQ9n89zJ16mQJ9cwIBf3JuKyN"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZyoUoGPsHxLmEmp4_LWn1JhbyCTYg5hg9NxYQ9n89zJ16mQJ9cwIBf3JuKyN\"}"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00cd0791-130f-48be-a12b-e43da431373b","keyName":"e2e-auth-iso-a-cbae27","subscription":"e2e-auth-iso-de5e3b","tenant":"e2e-shared-a-bbe1d4","userId":"00cd0791-130f-48be-a12b-e43da431373b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-de5e3b"}
{"level":"info","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd9e225e-fc58-457f-b3a4-9abe46d29bb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"198ecc50-f262-45f9-b075-de236909444d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42438","PortSpecifier":{"PortValue":42438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"198ecc50-f262-45f9-b075-de236909444d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"198ecc50-f262-45f9-b075-de236909444d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42438","PortSpecifier":{"PortValue":42438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288619,"nanos":822334688},"http":{"id":"198ecc50-f262-45f9-b075-de236909444d","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"198ecc50-f262-45f9-b075-de236909444d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"198ecc50-f262-45f9-b075-de236909444d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"198ecc50-f262-45f9-b075-de236909444d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"198ecc50-f262-45f9-b075-de236909444d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"198ecc50-f262-45f9-b075-de236909444d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"198ecc50-f262-45f9-b075-de236909444d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"198ecc50-f262-45f9-b075-de236909444d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"198ecc50-f262-45f9-b075-de236909444d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"198ecc50-f262-45f9-b075-de236909444d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"198ecc50-f262-45f9-b075-de236909444d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"198ecc50-f262-45f9-b075-de236909444d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44456","PortSpecifier":{"PortValue":44456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44456","PortSpecifier":{"PortValue":44456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288619,"nanos":858902401},"http":{"id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"042e9e1b-046a-45b2-ac72-26c1e26a97a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44460","PortSpecifier":{"PortValue":44460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44460","PortSpecifier":{"PortValue":44460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288619,"nanos":897851718},"http":{"id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","method":"GET","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-193ignCq1ggXgs31x_1kDfY3Sr7Ey2x7eMmY7H91JQtDj03UZMDeSzIwRyrXy"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-193ignCq1ggXgs31x_1kDfY3Sr7Ey2x7eMmY7H91JQtDj03UZMDeSzIwRyrXy\"}"}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-17T11:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b269f1-0f23-413d-b8f6-1969b9c82dfc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42938","PortSpecifier":{"PortValue":42938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42938","PortSpecifier":{"PortValue":42938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288637,"nanos":111833053},"http":{"id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b97d8dc-ad22-4c11-ad75-84cf5eafa52b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43000","PortSpecifier":{"PortValue":43000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f990a0b0-9950-45cf-8fce-68c089bf3965","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43000","PortSpecifier":{"PortValue":43000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288637,"nanos":146247810},"http":{"id":"f990a0b0-9950-45cf-8fce-68c089bf3965","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f990a0b0-9950-45cf-8fce-68c089bf3965","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42948","PortSpecifier":{"PortValue":42948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a20c174f-03a7-4893-955a-f1d8ed53124a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42948","PortSpecifier":{"PortValue":42948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288637,"nanos":184094995},"http":{"id":"a20c174f-03a7-4893-955a-f1d8ed53124a","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a20c174f-03a7-4893-955a-f1d8ed53124a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43010","PortSpecifier":{"PortValue":43010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43010","PortSpecifier":{"PortValue":43010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288637,"nanos":223132492},"http":{"id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:43:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72bd7f16-3618-44bc-b8f2-13b7a1008f76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e66b74-61ca-467a-a02f-324369b9b544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36934","PortSpecifier":{"PortValue":36934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99e66b74-61ca-467a-a02f-324369b9b544","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e66b74-61ca-467a-a02f-324369b9b544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36934","PortSpecifier":{"PortValue":36934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288654,"nanos":409391296},"http":{"id":"99e66b74-61ca-467a-a02f-324369b9b544","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99e66b74-61ca-467a-a02f-324369b9b544","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99e66b74-61ca-467a-a02f-324369b9b544","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99e66b74-61ca-467a-a02f-324369b9b544","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e66b74-61ca-467a-a02f-324369b9b544","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e66b74-61ca-467a-a02f-324369b9b544","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e66b74-61ca-467a-a02f-324369b9b544","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99e66b74-61ca-467a-a02f-324369b9b544","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e66b74-61ca-467a-a02f-324369b9b544","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e66b74-61ca-467a-a02f-324369b9b544","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e66b74-61ca-467a-a02f-324369b9b544","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e66b74-61ca-467a-a02f-324369b9b544","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54400","PortSpecifier":{"PortValue":54400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54400","PortSpecifier":{"PortValue":54400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288654,"nanos":451142044},"http":{"id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8de6da1-ad87-4621-b80f-3a9aa052a200","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54416","PortSpecifier":{"PortValue":54416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","method":"GET","path":"/maas-api/v1/api-keys/c4de72bd-8f7f-4499-88ea-8ea66c43cacd","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54416","PortSpecifier":{"PortValue":54416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288654,"nanos":490569770},"http":{"id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","method":"GET","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4de72bd-8f7f-4499-88ea-8ea66c43cacd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4de72bd-8f7f-4499-88ea-8ea66c43cacd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b5a2bcc-abd2-4962-bbbe-7b26e4e311f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36936","PortSpecifier":{"PortValue":36936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","method":"GET","path":"/maas-api/v1/api-keys/c4de72bd-8f7f-4499-88ea-8ea66c43cacd","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36936","PortSpecifier":{"PortValue":36936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288654,"nanos":521758405},"http":{"id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","method":"GET","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4de72bd-8f7f-4499-88ea-8ea66c43cacd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c4de72bd-8f7f-4499-88ea-8ea66c43cacd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:44:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c9f750-b8ef-4890-8878-85a03602c4ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32338a26-6f64-4690-b78a-0f3ae91546b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288672,"nanos":560501960},"http":{"id":"32338a26-6f64-4690-b78a-0f3ae91546b4","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32338a26-6f64-4690-b78a-0f3ae91546b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56442","PortSpecifier":{"PortValue":56442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b24beb08-ca65-488a-a498-4af51622f4b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56442","PortSpecifier":{"PortValue":56442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288672,"nanos":596037801},"http":{"id":"b24beb08-ca65-488a-a498-4af51622f4b1","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/auth-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b24beb08-ca65-488a-a498-4af51622f4b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56460","PortSpecifier":{"PortValue":56460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"826329e3-550c-4cf5-9dbc-8319cec23715","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56460","PortSpecifier":{"PortValue":56460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288672,"nanos":631645684},"http":{"id":"826329e3-550c-4cf5-9dbc-8319cec23715","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10glbShZ9e0FTxgSA_ObLqHAHT8ltE4YqU0EWr3PHsvw7f0DPxmmBsKBWGJqF"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10glbShZ9e0FTxgSA_ObLqHAHT8ltE4YqU0EWr3PHsvw7f0DPxmmBsKBWGJqF\"}"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5650e42-8f77-48f8-bb15-bb28f5c4c098","keyName":"e2e-auth-iso-a-a419d6","subscription":"e2e-auth-iso-e8a71e","tenant":"e2e-shared-a-bbe1d4","userId":"a5650e42-8f77-48f8-bb15-bb28f5c4c098","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/auth-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e8a71e"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"826329e3-550c-4cf5-9dbc-8319cec23715","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fec46c65c90aced483b119a5a87c4a15b64841835bb845929b620b3b4db3d40"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9360e8789861cce41756c8c908abfd8f26f4151109338d147a47c7999743ff36"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6f6cfd963c109142501e81f8433dcd80faadbb3d207c049eb085f98514abfcd"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdd0ce82fb05d369fa2054bba75aa076fd1a26541fae4f7c69834aac57eb1c10"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090b3619589f46a4523c8919b64bb4762e7b72415297c3900fc40ae17d992a7f"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4ad4913d478c6d0689b0d766272db7697b583854a1e53197f5a254726743883"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee1554b169b55843a512659123e19c84e9aa22be28fd1daa7be363e8cb02dfb"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e80183e8c99684b5f4e0c6360b947de5271625bba111f501af241c91e2b7ab32"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e09a7b75d5cc56c9d24c24ca2039fcf0e10c0920709b799ceda35679ffa226"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/908bf1b9aea0f2439b6265a341a02e0ee43ff1349a18b347412e2ad56012e4ab"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60e853571a27df021888fe9cfcf93ae89045e855d30c695ac3f8a6d65dfb908"}
{"level":"info","ts":"2026-07-17T11:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/360181d7dc16ff16cf8fcde19335412374d0c35d7ec036e94fa028d7f2c4a00c"}
{"level":"info","ts":"2026-07-17T11:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1fc4946d86dccd335708c42503b58f874e0ca1848e93887d9e63aa80e5a4dfb"}
{"level":"info","ts":"2026-07-17T11:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16967769a7a394cecee704a1e063bfd4904625fc02fc50b7caa9cadb60d7ad86"}
{"level":"info","ts":"2026-07-17T11:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0072a83d37feada85c2067b559a010418fc969903773369d1b8b5e9cad2300f4"}
{"level":"info","ts":"2026-07-17T11:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfa3f2b932c0b024a21d3effc75eba6a6bf63b83b946c861845173c5d289b220"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f"}
{"level":"error","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:44:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"}
{"level":"debug","ts":"2026-07-17T11:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"info","ts":"2026-07-17T11:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8"}
{"level":"error","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249"}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b"}
{"level":"debug","ts":"2026-07-17T11:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249"}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"debug","ts":"2026-07-17T11:45:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:45:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:45:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:45:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:45:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f"}
{"level":"debug","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"info","ts":"2026-07-17T11:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51896","PortSpecifier":{"PortValue":51896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51896","PortSpecifier":{"PortValue":51896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288733,"nanos":46544793},"http":{"id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/sub-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"087485e3-f0cf-41d4-a100-23ee90ef50bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48316","PortSpecifier":{"PortValue":48316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48316","PortSpecifier":{"PortValue":48316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288733,"nanos":87493648},"http":{"id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/sub-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5b1d88-f456-4b53-b387-5b20b5e7d2f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51910","PortSpecifier":{"PortValue":51910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53f636c7-1750-40f3-ab85-31985b9a7595","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51910","PortSpecifier":{"PortValue":51910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288733,"nanos":126579930},"http":{"id":"53f636c7-1750-40f3-ab85-31985b9a7595","method":"GET","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17kX1zA9eok2txMXR_7wqLHLl5flqlB66HpbPDipBzCcSvtgvfmbGEyUMxCHt"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17kX1zA9eok2txMXR_7wqLHLl5flqlB66HpbPDipBzCcSvtgvfmbGEyUMxCHt\"}"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5d2ae71f-8381-4cac-9e0a-f4b21dd98c47","keyName":"e2e-sub-iso-922195","subscription":"e2e-a-only-c1b3db","tenant":"e2e-shared-a-bbe1d4","userId":"5d2ae71f-8381-4cac-9e0a-f4b21dd98c47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/sub-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c1b3db"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53f636c7-1750-40f3-ab85-31985b9a7595","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48318","PortSpecifier":{"PortValue":48318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3182f31c-7964-4e4c-8db4-116041a4d261","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48318","PortSpecifier":{"PortValue":48318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288733,"nanos":167584359},"http":{"id":"3182f31c-7964-4e4c-8db4-116041a4d261","method":"GET","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11Bo7TXDOaxMaOBNA_RqEOykyZVMMdLOulZr202EGZFpT3MT2chijrSEmsDt8"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11Bo7TXDOaxMaOBNA_RqEOykyZVMMdLOulZr202EGZFpT3MT2chijrSEmsDt8\"}"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76d6e9ac-397a-4b44-b788-cf44a41061d6","keyName":"e2e-sub-iso-131748","subscription":"e2e-b-only-c1b3db","tenant":"e2e-shared-b-7df590","userId":"76d6e9ac-397a-4b44-b788-cf44a41061d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/sub-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c1b3db"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3182f31c-7964-4e4c-8db4-116041a4d261","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38512","PortSpecifier":{"PortValue":38512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"037dc0fc-b7b0-46da-a299-00d6220467a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38512","PortSpecifier":{"PortValue":38512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288752,"nanos":629144480},"http":{"id":"037dc0fc-b7b0-46da-a299-00d6220467a1","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/sub-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"037dc0fc-b7b0-46da-a299-00d6220467a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52734","PortSpecifier":{"PortValue":52734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc021f04-c729-4bf4-b386-f091e90fe239","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52734","PortSpecifier":{"PortValue":52734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288752,"nanos":667819670},"http":{"id":"cc021f04-c729-4bf4-b386-f091e90fe239","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/sub-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc021f04-c729-4bf4-b386-f091e90fe239","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38516","PortSpecifier":{"PortValue":38516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b4eba21-ec96-4613-b583-5e9292af5811","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38516","PortSpecifier":{"PortValue":38516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288752,"nanos":707076430},"http":{"id":"3b4eba21-ec96-4613-b583-5e9292af5811","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17odMEEeIQogB3eT3_Uxu18Uk47PRX3zBmLFsqKqPsLCs0gQEHPvy9FKAjdxp"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17odMEEeIQogB3eT3_Uxu18Uk47PRX3zBmLFsqKqPsLCs0gQEHPvy9FKAjdxp\"}"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5da6da3e-eb7e-4dce-a98c-ced127c61874","keyName":"e2e-sub-iso-ea0483","subscription":"e2e-shared-sub-8498ce","tenant":"e2e-shared-a-bbe1d4","userId":"5da6da3e-eb7e-4dce-a98c-ced127c61874","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/sub-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8498ce"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b4eba21-ec96-4613-b583-5e9292af5811","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6990414e-6feb-4310-b733-d85419b801a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52738","PortSpecifier":{"PortValue":52738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6990414e-6feb-4310-b733-d85419b801a5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6990414e-6feb-4310-b733-d85419b801a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52738","PortSpecifier":{"PortValue":52738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288752,"nanos":737643712},"http":{"id":"6990414e-6feb-4310-b733-d85419b801a5","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PpeoDmKYV9qJdj6P_ZaTEHeaCEFZkbbm91PSC7KImZwPZoW2Fj9XNK0pPgCl"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PpeoDmKYV9qJdj6P_ZaTEHeaCEFZkbbm91PSC7KImZwPZoW2Fj9XNK0pPgCl\"}"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf2305e8-b5ec-4a5c-9801-38d2650cdac4","keyName":"e2e-sub-iso-0c6e0a","subscription":"e2e-shared-sub-8498ce","tenant":"e2e-shared-b-7df590","userId":"bf2305e8-b5ec-4a5c-9801-38d2650cdac4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6990414e-6feb-4310-b733-d85419b801a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/sub-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6990414e-6feb-4310-b733-d85419b801a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8498ce"}
{"level":"info","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6990414e-6feb-4310-b733-d85419b801a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6990414e-6feb-4310-b733-d85419b801a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3"}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"}
{"level":"error","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88870105f82c86f2bdd5418f8a3e17ac71381714fe44aebea90ccbf8d9101786"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/109a7c805eaa2cf5933a0d92f24a3ae3982e6ba0f28bdfc3f9eb32019fa21e2f"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b5f33c3516e0043b180880423f764f837379c079d6ecee212f5f95dbb1196c7"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d065c3e4dcab8eee1124fda4f9bfbaf4f1973bc08285517579ad799f080e9249"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1306845252b9e7587b4e39ab36119d8adf6fdc43855a9c1ee3cced5d4f896e9"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba1555a73e302467108ec0b17365c41e3a8e6dcbc8fd6c206940dc538bb8da10"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9921e9f07b2a1efbc011bca95332bfe3c9b1c2f80eade18ab21363594fddae8"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28dc38743332f32ff63d4d75f34a800e0ceb88064634f670000fd186519abb88"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9644ac88f9b15474ce671880844f30f4ad0e82832d53958742f7a228a136cd9"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c78a4db221e63a48da4c0ecc342527d1ec1edcea4ba22ae104111b3433ee64b"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1dc4068663125ca686129e3fee3a9ad19d39db5365bedac4226fede5e35ae3a"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52cdc5e0c9f514dc2b2faa33ed374333972f41a6f9537d69d0ee4ab75110415"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a00033135f8cce4294d7209fc8fbfec3853e7e5ba87c68b76087a493fa004f5"}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2e0183fb56eb965cf0e17a669365b344c8780921d3fbd9b5f4079cdfd7f57b8"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a67826368580b8639ef0cd8f44b7b7c2f19a02c1712dcbdc5aab11fc3c4674f"}
{"level":"info","ts":"2026-07-17T11:46:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2378dd27fc79ad21f2399e9cd4cefeed492763ff8de032a9798caa2133c6339"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e"}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"debug","ts":"2026-07-17T11:46:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"error","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T11:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335"}
{"level":"debug","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"debug","ts":"2026-07-17T11:46:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T11:46:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307"}
{"level":"info","ts":"2026-07-17T11:46:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"}
{"level":"info","ts":"2026-07-17T11:46:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"}
{"level":"info","ts":"2026-07-17T11:46:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54616","PortSpecifier":{"PortValue":54616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54616","PortSpecifier":{"PortValue":54616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288810,"nanos":34315591},"http":{"id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9407907e-8c46-4b5c-a7e2-7dc4c838342f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288810,"nanos":77199164},"http":{"id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/rate-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1547db3a-db5d-42f4-b068-6a40bd03ec8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54630","PortSpecifier":{"PortValue":54630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4a94b71-662e-4144-b54c-8ab94c22f837","method":"POST","path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54630","PortSpecifier":{"PortValue":54630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288810,"nanos":120021756},"http":{"id":"e4a94b71-662e-4144-b54c-8ab94c22f837","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HpcenbhCZJyzFGBm_AkTBh0pFoaw7D8InwCBgzF8rvtHx7ubXA2UwnofJ8qw"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HpcenbhCZJyzFGBm_AkTBh0pFoaw7D8InwCBgzF8rvtHx7ubXA2UwnofJ8qw\"}"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","keyName":"e2e-rate-a-135195","subscription":"e2e-rate-iso-a-135195","tenant":"e2e-shared-a-bbe1d4","userId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\",\"requestedSubscription\":\"e2e-rate-iso-a-135195\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-135195","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-135195"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","keyName":"e2e-rate-a-135195","selected_subscription":"e2e-rate-iso-a-135195","selected_subscription_key":"ai-tenant-e2e-shared-a-bbe1d4/e2e-rate-iso-a-135195@ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-135195","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:46:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a94b71-662e-4144-b54c-8ab94c22f837","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b1337f9-f35d-476e-87d4-83931ffced9f","method":"POST","path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288811,"nanos":173067941},"http":{"id":"7b1337f9-f35d-476e-87d4-83931ffced9f","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HpcenbhCZJyzFGBm_AkTBh0pFoaw7D8InwCBgzF8rvtHx7ubXA2UwnofJ8qw"}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HpcenbhCZJyzFGBm_AkTBh0pFoaw7D8InwCBgzF8rvtHx7ubXA2UwnofJ8qw\"}"}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","keyName":"e2e-rate-a-135195","subscription":"e2e-rate-iso-a-135195","tenant":"e2e-shared-a-bbe1d4","userId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\",\"requestedSubscription\":\"e2e-rate-iso-a-135195\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-135195","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-135195"}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","keyName":"e2e-rate-a-135195","selected_subscription":"e2e-rate-iso-a-135195","selected_subscription_key":"ai-tenant-e2e-shared-a-bbe1d4/e2e-rate-iso-a-135195@ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-135195","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:46:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b1337f9-f35d-476e-87d4-83931ffced9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54662","PortSpecifier":{"PortValue":54662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","method":"POST","path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54662","PortSpecifier":{"PortValue":54662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288812,"nanos":211484439},"http":{"id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HpcenbhCZJyzFGBm_AkTBh0pFoaw7D8InwCBgzF8rvtHx7ubXA2UwnofJ8qw"}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HpcenbhCZJyzFGBm_AkTBh0pFoaw7D8InwCBgzF8rvtHx7ubXA2UwnofJ8qw\"}"}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","keyName":"e2e-rate-a-135195","subscription":"e2e-rate-iso-a-135195","tenant":"e2e-shared-a-bbe1d4","userId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\",\"requestedSubscription\":\"e2e-rate-iso-a-135195\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-135195","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-135195"}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d76cc3-f4d2-4e9e-a381-7811e4caac93","keyName":"e2e-rate-a-135195","selected_subscription":"e2e-rate-iso-a-135195","selected_subscription_key":"ai-tenant-e2e-shared-a-bbe1d4/e2e-rate-iso-a-135195@ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-135195","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e3e3a29-f651-43a4-9b70-1f1b0f7de9bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36806","PortSpecifier":{"PortValue":36806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36806","PortSpecifier":{"PortValue":36806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288825,"nanos":213329804},"http":{"id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d95579-84a4-43d3-85c2-ae8cc82c90d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48682","PortSpecifier":{"PortValue":48682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48682","PortSpecifier":{"PortValue":48682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288825,"nanos":263234779},"http":{"id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"]}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/abc101d329b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8510fe4c-dfed-4a56-ab35-c7819348d422"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7b0592a5-18e3-4519-ad0d-5466d401016c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/rate-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd77be53-ec5d-465b-ad7c-57c643be7e8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36816","PortSpecifier":{"PortValue":36816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","method":"POST","path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36816","PortSpecifier":{"PortValue":36816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288825,"nanos":307272802},"http":{"id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hZhYGoCfklRlRjP4_kyE8bwdEpYS7oSLg2Sdrtjq3pbzjEYSHFjATdqBj8VA"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hZhYGoCfklRlRjP4_kyE8bwdEpYS7oSLg2Sdrtjq3pbzjEYSHFjATdqBj8VA\"}"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0b6f4dc-a809-4412-8010-639f558193dc","keyName":"e2e-rate-a-e6b88f","subscription":"e2e-rate-iso-a-e6b88f","tenant":"e2e-shared-a-bbe1d4","userId":"c0b6f4dc-a809-4412-8010-639f558193dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\",\"requestedSubscription\":\"e2e-rate-iso-a-e6b88f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6b88f","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e6b88f"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c0b6f4dc-a809-4412-8010-639f558193dc","keyName":"e2e-rate-a-e6b88f","selected_subscription":"e2e-rate-iso-a-e6b88f","selected_subscription_key":"ai-tenant-e2e-shared-a-bbe1d4/e2e-rate-iso-a-e6b88f@ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6b88f","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8db056-e2d7-4a30-ad80-f8c4d5ebfe1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09a6569-cab6-495c-b228-2c8324681f13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36828","PortSpecifier":{"PortValue":36828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d09a6569-cab6-495c-b228-2c8324681f13","method":"POST","path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09a6569-cab6-495c-b228-2c8324681f13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36828","PortSpecifier":{"PortValue":36828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288826,"nanos":372708509},"http":{"id":"d09a6569-cab6-495c-b228-2c8324681f13","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hZhYGoCfklRlRjP4_kyE8bwdEpYS7oSLg2Sdrtjq3pbzjEYSHFjATdqBj8VA"}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hZhYGoCfklRlRjP4_kyE8bwdEpYS7oSLg2Sdrtjq3pbzjEYSHFjATdqBj8VA\"}"}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0b6f4dc-a809-4412-8010-639f558193dc","keyName":"e2e-rate-a-e6b88f","subscription":"e2e-rate-iso-a-e6b88f","tenant":"e2e-shared-a-bbe1d4","userId":"c0b6f4dc-a809-4412-8010-639f558193dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\",\"requestedSubscription\":\"e2e-rate-iso-a-e6b88f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6b88f","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d09a6569-cab6-495c-b228-2c8324681f13","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e6b88f"}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09a6569-cab6-495c-b228-2c8324681f13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c0b6f4dc-a809-4412-8010-639f558193dc","keyName":"e2e-rate-a-e6b88f","selected_subscription":"e2e-rate-iso-a-e6b88f","selected_subscription_key":"ai-tenant-e2e-shared-a-bbe1d4/e2e-rate-iso-a-e6b88f@ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6b88f","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09a6569-cab6-495c-b228-2c8324681f13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09a6569-cab6-495c-b228-2c8324681f13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e809d3b-b930-4928-bda4-6466539e3148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e809d3b-b930-4928-bda4-6466539e3148","method":"POST","path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions","host":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e809d3b-b930-4928-bda4-6466539e3148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288827,"nanos":421368402},"http":{"id":"4e809d3b-b930-4928-bda4-6466539e3148","method":"POST","headers":{":authority":"e2e-shared-a-bbe1d4.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hZhYGoCfklRlRjP4_kyE8bwdEpYS7oSLg2Sdrtjq3pbzjEYSHFjATdqBj8VA"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hZhYGoCfklRlRjP4_kyE8bwdEpYS7oSLg2Sdrtjq3pbzjEYSHFjATdqBj8VA\"}"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0b6f4dc-a809-4412-8010-639f558193dc","keyName":"e2e-rate-a-e6b88f","subscription":"e2e-rate-iso-a-e6b88f","tenant":"e2e-shared-a-bbe1d4","userId":"c0b6f4dc-a809-4412-8010-639f558193dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\",\"requestedSubscription\":\"e2e-rate-iso-a-e6b88f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bbe1d4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6b88f","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e809d3b-b930-4928-bda4-6466539e3148","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bbe1d4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e6b88f"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e809d3b-b930-4928-bda4-6466539e3148","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c0b6f4dc-a809-4412-8010-639f558193dc","keyName":"e2e-rate-a-e6b88f","selected_subscription":"e2e-rate-iso-a-e6b88f","selected_subscription_key":"ai-tenant-e2e-shared-a-bbe1d4/e2e-rate-iso-a-e6b88f@ai-tenant-e2e-shared-a-bbe1d4/rate-test-model-bbe1d4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bbe1d4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e6b88f","namespace":"ai-tenant-e2e-shared-a-bbe1d4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e809d3b-b930-4928-bda4-6466539e3148","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e809d3b-b930-4928-bda4-6466539e3148","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57380","PortSpecifier":{"PortValue":57380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","method":"POST","path":"/ai-tenant-e2e-shared-b-7df590/rate-test-model-7df590/v1/completions","host":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57380","PortSpecifier":{"PortValue":57380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784288827,"nanos":459105409},"http":{"id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","method":"POST","headers":{":authority":"e2e-shared-b-7df590.apps.9a530835-6e2c-47a2-bbaa-abc101d329b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-7df590/rate-test-model-7df590/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FpJU5TbOd18sQdcy_6QfAyJL7Eqm9jaqhiFsS3uckSoq7CcbWZdkXrjTuKQ1"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FpJU5TbOd18sQdcy_6QfAyJL7Eqm9jaqhiFsS3uckSoq7CcbWZdkXrjTuKQ1\"}"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3944dd4d-f6cc-4994-b14f-8f74221ce27d","keyName":"e2e-rate-b-e6b88f","subscription":"e2e-rate-iso-b-e6b88f","tenant":"e2e-shared-b-7df590","userId":"3944dd4d-f6cc-4994-b14f-8f74221ce27d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-7df590/rate-test-model-7df590\",\"requestedSubscription\":\"e2e-rate-iso-b-e6b88f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7df590.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7df590","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e6b88f","namespace":"ai-tenant-e2e-shared-b-7df590","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7df590/rate-test-model-7df590\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7df590/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e6b88f"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3944dd4d-f6cc-4994-b14f-8f74221ce27d","keyName":"e2e-rate-b-e6b88f","selected_subscription":"e2e-rate-iso-b-e6b88f","selected_subscription_key":"ai-tenant-e2e-shared-b-7df590/e2e-rate-iso-b-e6b88f@ai-tenant-e2e-shared-b-7df590/rate-test-model-7df590","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7df590","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e6b88f","namespace":"ai-tenant-e2e-shared-b-7df590","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T11:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"680ccdc1-a1fa-4a13-b88d-4f2a86d93199","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d94e4846905e1f55e279795dea223defe71baeb98719a3953475e54ba9868ab"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/becfe54bc97c0e98f3ced27bbf22dc9f763a8b5dd175f9512a2dd1dc3b03d67d"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88aeb1a85c17bcd49f1596c0cf893ef3a380b09e101a0d42caa4d5ffff69ff87"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db26b2ac78d6df714526198c637b49cefc255320c49aeddd04618f9889f4bd6e"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a774666ddcf7a6fa427bc16354495ec3745380755851e44423963b206fe28e33"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e92eee734e068f30c03c105e87e4953fa7ead4e5cae4181b72504986e3c1d8e"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e880dae31a77962ab53e3d425052c71b98447b2985f1ffd6203ad4b9d3411e9"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458ebc7931c5f7f6ddab8fe1ac9ba9e7ebbc531074bece6200f6011320606a7a"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01f93ee256310dcc5faa95cdf2cd03b733440ba3cdc8113439ae1746611e8bdd"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1d9216f38ac78d95b0cd54f8998717abdbff24fa80a4e0b391b610ffd068307"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/849e91f8e984a489aa25514ec8d7d195b4128ba4c6cb8b1591f6a1e8e9c99702"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb6f87f23689a044240cf58aaa55436f68ccac58bc2796d494bb47e81aedf335"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d854ed4adea02b0245e622493e0c3ac12cab4e41add99878832bc1eda1c8bb51"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f10b95b5f5ef46a14966005267054f7c7ec03e560e9fa5d672976bced841bfc3"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/939a7009f08e63e44203d71b1f44c508f30e3fe627dfd5924fdbb27c9aa53682"}
{"level":"info","ts":"2026-07-17T11:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/304ec2e910b1d8c21b66540761a91f95fc48ac2cdb423d937febe616238fdf21"}
{"level":"info","ts":"2026-07-17T11:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3999df3be6e67d00a8a4c3bac84d885da0709ab3f17218212702c5f73560dd65"}
{"level":"info","ts":"2026-07-17T11:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5849b1ec1152c46db5514c59b600828ee4668526ac28da9eaa51c95a4fed171"}
{"level":"info","ts":"2026-07-17T11:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a74a1b0693a07e08d59e94520f5e9dc854f4198017bee448d868449c874c5490"}
{"level":"info","ts":"2026-07-17T11:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69ceb48f1dd9afc6b886cfa55e9c6dbb56ea1cc117a2b95f1d11c94c5b19b5ea"}
{"level":"info","ts":"2026-07-17T11:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/309a7d0f3ece2f966ab09cedc0951dca92095e81f9854df435acb3d8893e1077"}
{"level":"info","ts":"2026-07-17T11:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8932c406f940b2f3f64735266acdb9c0c3dbb9700eea3fd410aed9cdcb08371"}
{"level":"info","ts":"2026-07-17T11:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0ee59a99f9488c9ab3b0870f3cdbd96f21be2e61ac9e3c820427a09e1818a02"}
{"level":"info","ts":"2026-07-17T11:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7adf0e86190f25fcb36025d9a2e7bea4b371e1ebabe76e0e774f455d6c82e7a4"}