--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3"}
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:55:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:55:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:55:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:55:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3"}
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3"}
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:55:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:55:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3"}
{"level":"info","ts":"2026-07-06T12:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99495277fa63e0ba78920e0916804f39df97232b471dba8d1203d6280f95ee0b"}
{"level":"info","ts":"2026-07-06T12:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cb01b309055b7eaefb3958ff191dce2f6890b92d407ef7b31f2145a5c992abd"}
{"level":"info","ts":"2026-07-06T12:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fa57ec48ac754200c8ba4f5576ba3f410a00936531590809c082fd347f79347"}
{"level":"info","ts":"2026-07-06T12:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1841b430dc55bd3550f1ec89a5e092af4b3a4abe5f2762f7a011833f715f3ff3"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab"}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335"}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1"}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1"}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"}
{"level":"info","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8"}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410"}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8"}
{"level":"info","ts":"2026-07-06T12:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37204","PortSpecifier":{"PortValue":37204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80bbe381-ef9d-4428-9ffd-c886261759e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37204","PortSpecifier":{"PortValue":37204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342661,"nanos":27767716},"http":{"id":"80bbe381-ef9d-4428-9ffd-c886261759e0","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80bbe381-ef9d-4428-9ffd-c886261759e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117ab765-276d-4079-9c85-cec6ac43341b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33732","PortSpecifier":{"PortValue":33732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"117ab765-276d-4079-9c85-cec6ac43341b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117ab765-276d-4079-9c85-cec6ac43341b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33732","PortSpecifier":{"PortValue":33732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342661,"nanos":86700614},"http":{"id":"117ab765-276d-4079-9c85-cec6ac43341b","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"117ab765-276d-4079-9c85-cec6ac43341b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"117ab765-276d-4079-9c85-cec6ac43341b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"117ab765-276d-4079-9c85-cec6ac43341b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117ab765-276d-4079-9c85-cec6ac43341b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117ab765-276d-4079-9c85-cec6ac43341b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117ab765-276d-4079-9c85-cec6ac43341b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"117ab765-276d-4079-9c85-cec6ac43341b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117ab765-276d-4079-9c85-cec6ac43341b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117ab765-276d-4079-9c85-cec6ac43341b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117ab765-276d-4079-9c85-cec6ac43341b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117ab765-276d-4079-9c85-cec6ac43341b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37218","PortSpecifier":{"PortValue":37218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","method":"GET","path":"/maas-api/v1/api-keys/ad01e403-0dc5-4b6f-bfb5-785c76a3fc72","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37218","PortSpecifier":{"PortValue":37218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342661,"nanos":168054334},"http":{"id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","method":"GET","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ad01e403-0dc5-4b6f-bfb5-785c76a3fc72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ad01e403-0dc5-4b6f-bfb5-785c76a3fc72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf61e16-60ba-4c69-a8aa-bd2178b88a85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cd875f-2212-439e-9497-45417b8b5713","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33740","PortSpecifier":{"PortValue":33740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81cd875f-2212-439e-9497-45417b8b5713","method":"GET","path":"/maas-api/v1/api-keys/a843d861-b97d-4a4a-bd5e-1d936597c1d4","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cd875f-2212-439e-9497-45417b8b5713","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33740","PortSpecifier":{"PortValue":33740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342661,"nanos":201371044},"http":{"id":"81cd875f-2212-439e-9497-45417b8b5713","method":"GET","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a843d861-b97d-4a4a-bd5e-1d936597c1d4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81cd875f-2212-439e-9497-45417b8b5713","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81cd875f-2212-439e-9497-45417b8b5713","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81cd875f-2212-439e-9497-45417b8b5713","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a843d861-b97d-4a4a-bd5e-1d936597c1d4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cd875f-2212-439e-9497-45417b8b5713","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cd875f-2212-439e-9497-45417b8b5713","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81cd875f-2212-439e-9497-45417b8b5713","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81cd875f-2212-439e-9497-45417b8b5713","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cd875f-2212-439e-9497-45417b8b5713","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cd875f-2212-439e-9497-45417b8b5713","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cd875f-2212-439e-9497-45417b8b5713","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cd875f-2212-439e-9497-45417b8b5713","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60984","PortSpecifier":{"PortValue":60984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60984","PortSpecifier":{"PortValue":60984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342678,"nanos":526092214},"http":{"id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6125dbda-dee2-4cef-893c-5e8ab1e17df5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40106","PortSpecifier":{"PortValue":40106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46e0d353-3992-4214-9fb7-7393e904ae78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40106","PortSpecifier":{"PortValue":40106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342678,"nanos":579581822},"http":{"id":"46e0d353-3992-4214-9fb7-7393e904ae78","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e0d353-3992-4214-9fb7-7393e904ae78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60998","PortSpecifier":{"PortValue":60998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60998","PortSpecifier":{"PortValue":60998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342678,"nanos":618853736},"http":{"id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","method":"GET","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-40lJqPiXkViiXhG1_Pz1eMwfDT6jowspqMGtOTBoAtACMShhhdNVUZbcAFol"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-40lJqPiXkViiXhG1_Pz1eMwfDT6jowspqMGtOTBoAtACMShhhdNVUZbcAFol\"}"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32d313bc-a650-404f-afe5-a3156b7c624b","keyName":"e2e-auth-iso-a-a8e77c","subscription":"e2e-auth-iso-381854","tenant":"e2e-shared-a-e47695","userId":"32d313bc-a650-404f-afe5-a3156b7c624b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-381854"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"218ed3d4-2085-4705-a62b-b4f6c2fb820f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52786","PortSpecifier":{"PortValue":52786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fd75746-4d20-4785-8d08-95ef7928595f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52786","PortSpecifier":{"PortValue":52786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342693,"nanos":617087904},"http":{"id":"0fd75746-4d20-4785-8d08-95ef7928595f","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fd75746-4d20-4785-8d08-95ef7928595f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51384","PortSpecifier":{"PortValue":51384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51384","PortSpecifier":{"PortValue":51384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342693,"nanos":650916990},"http":{"id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9b728b9-6637-41b7-bc1a-6b78ea0188be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342693,"nanos":694380250},"http":{"id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","method":"GET","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16y9D6mk5uGSkawQU_w69WMlfwxHm9ZoGmy3QbrYWpYlwpeAvJlCCsEKrt5av"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16y9D6mk5uGSkawQU_w69WMlfwxHm9ZoGmy3QbrYWpYlwpeAvJlCCsEKrt5av\"}"}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T12:58:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eb2bd89-4de4-48c0-ad32-0d8aebf8794a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8c93bec-c70d-4247-99c6-a8418a13b514","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342708,"nanos":764798710},"http":{"id":"c8c93bec-c70d-4247-99c6-a8418a13b514","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8c93bec-c70d-4247-99c6-a8418a13b514","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97c3502d-345d-4633-9993-f1df55d8d30a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342708,"nanos":797485809},"http":{"id":"97c3502d-345d-4633-9993-f1df55d8d30a","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97c3502d-345d-4633-9993-f1df55d8d30a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33286","PortSpecifier":{"PortValue":33286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e34a4a08-dd95-4742-af40-96b5c68176e0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33286","PortSpecifier":{"PortValue":33286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342708,"nanos":835662812},"http":{"id":"e34a4a08-dd95-4742-af40-96b5c68176e0","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e34a4a08-dd95-4742-af40-96b5c68176e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44176","PortSpecifier":{"PortValue":44176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92112be8-8258-459f-9b73-73e9a9fdb669","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44176","PortSpecifier":{"PortValue":44176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342708,"nanos":867190476},"http":{"id":"92112be8-8258-459f-9b73-73e9a9fdb669","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92112be8-8258-459f-9b73-73e9a9fdb669","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49680","PortSpecifier":{"PortValue":49680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49680","PortSpecifier":{"PortValue":49680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342726,"nanos":36468830},"http":{"id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8b7eff4-8f1b-4e5d-bb4c-c8c9fd947d65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342726,"nanos":72729329},"http":{"id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"281bba0b-3fb0-4ecf-ba8f-85683a6a9007","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33282","PortSpecifier":{"PortValue":33282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60abc73c-6d8d-4884-9f33-777e064d4566","method":"GET","path":"/maas-api/v1/api-keys/d1260488-7c5f-4b27-88d7-8b78133a3604","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33282","PortSpecifier":{"PortValue":33282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342726,"nanos":105398831},"http":{"id":"60abc73c-6d8d-4884-9f33-777e064d4566","method":"GET","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d1260488-7c5f-4b27-88d7-8b78133a3604",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d1260488-7c5f-4b27-88d7-8b78133a3604",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60abc73c-6d8d-4884-9f33-777e064d4566","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49690","PortSpecifier":{"PortValue":49690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","method":"GET","path":"/maas-api/v1/api-keys/d1260488-7c5f-4b27-88d7-8b78133a3604","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49690","PortSpecifier":{"PortValue":49690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342726,"nanos":135988724},"http":{"id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","method":"GET","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d1260488-7c5f-4b27-88d7-8b78133a3604",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d1260488-7c5f-4b27-88d7-8b78133a3604",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5184e31e-1396-4783-b5be-b86cbcc8f34c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42812","PortSpecifier":{"PortValue":42812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42812","PortSpecifier":{"PortValue":42812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342741,"nanos":251179966},"http":{"id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5da95d8a-a2e1-45d3-89a1-79ca0daeeafa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60014","PortSpecifier":{"PortValue":60014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60014","PortSpecifier":{"PortValue":60014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342741,"nanos":286862530},"http":{"id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/auth-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe57dfa2-41e1-43e0-b754-f909c5707aa4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42818","PortSpecifier":{"PortValue":42818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42818","PortSpecifier":{"PortValue":42818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342741,"nanos":319236278},"http":{"id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c5TRJLllSFOdxyl7_AHw5hYEzw6a3oxNNv16ItgtosXCli1azu2MsPO0Mkv0"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c5TRJLllSFOdxyl7_AHw5hYEzw6a3oxNNv16ItgtosXCli1azu2MsPO0Mkv0\"}"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a7d3226-4666-464c-ad7e-bce2a8b33005","keyName":"e2e-auth-iso-a-c688b6","subscription":"e2e-auth-iso-7f481b","tenant":"e2e-shared-a-e47695","userId":"1a7d3226-4666-464c-ad7e-bce2a8b33005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/auth-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7f481b"}
{"level":"info","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T12:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e080c8b1-4fef-4fc3-a074-7eb7cb02f7f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a563104a1ce5c1225c7f938a46a400e4e068f96465d7d316aa0e10823c6443ab"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5233ffb8cf35c36c521dff47b146ee5d2648aeca580cd648420bef54c84b590a"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47d29dc67a59beb598e1ae2b1f0a589fc371de7be85bdea74b153346987edae1"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aef010df24908651525cc7b82913d3e9dfce7371ecb8b9c0a35afe5d32aaaa8"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669696f0f2a000cd369ede30a8daea5882f2be62709632acf0797457bff48385"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/916025430a9fb2978f67639758572b2981a4b6067c7c0082093c3aeb233c53ec"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5103de9cf7ba5524f2378048351417841184b62df577fa40b9ada23e633e6335"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26463d6cff5e2d93435dbe5863ee731e74b30b1b0b028f49b03425ca87e608e1"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25842fe6e1e080849d000d891137e3c119e93c2f8a3a9c4f7515dca2b195bc78"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/571de39a5b54219facf3ec8ac051cd8642f9df4385e8b102c91e1d98263337bc"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd684be742b8d9effb458e4082393987f2e5ba29f2403b0dcb5923397c9d3d3f"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59788553723ffea6d18844ef697950940e2562480c217c479d8062f05823024b"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85d8805fb8c64a61fd41226b0e6eb127985607121f3fd4b40a6a3e03ca458d27"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d5e77453caadf7ec54338f51762758f3dade1a71d1e6038ca7f9e0356c3b8e7"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cb386051f57acaa39528d9878b30be6abe297355ac1261f1022286a694ea606"}
{"level":"info","ts":"2026-07-06T12:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc1ea8e4a9e1896d7b201d01bb3b23804aaa54d81caf877142d6150646548410"}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"error","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5"}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"debug","ts":"2026-07-06T12:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"}
{"level":"error","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T12:59:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"}
{"level":"debug","ts":"2026-07-06T12:59:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"error","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"error","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"error","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c"}
{"level":"error","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"error","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T12:59:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T12:59:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T12:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"error","ts":"2026-07-06T12:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T12:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T12:59:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c"}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192"}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"error","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"}
{"level":"info","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}
{"level":"error","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"error","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"}
{"level":"debug","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"info","ts":"2026-07-06T13:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54328","PortSpecifier":{"PortValue":54328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61ce9214-6bbb-4df8-a3c4-f75933817832","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54328","PortSpecifier":{"PortValue":54328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342814,"nanos":354765486},"http":{"id":"61ce9214-6bbb-4df8-a3c4-f75933817832","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/sub-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61ce9214-6bbb-4df8-a3c4-f75933817832","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37030","PortSpecifier":{"PortValue":37030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37030","PortSpecifier":{"PortValue":37030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342814,"nanos":394696277},"http":{"id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/sub-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcbd68f4-adf0-42a8-83fa-417d465f71f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e093e072-d32a-4166-a350-4bd123cd3633","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54330","PortSpecifier":{"PortValue":54330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e093e072-d32a-4166-a350-4bd123cd3633","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e093e072-d32a-4166-a350-4bd123cd3633","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54330","PortSpecifier":{"PortValue":54330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342814,"nanos":436609397},"http":{"id":"e093e072-d32a-4166-a350-4bd123cd3633","method":"GET","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y2MY2wOw2IU5AFsG_tbyJ5fDSsnwTdi2OTsmqZXV2AevieCUeJPhyBX58HvZ"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y2MY2wOw2IU5AFsG_tbyJ5fDSsnwTdi2OTsmqZXV2AevieCUeJPhyBX58HvZ\"}"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c2ac55a-ce62-4d63-a1e0-abb4b05795b6","keyName":"e2e-sub-iso-3a9c5b","subscription":"e2e-a-only-0d98e5","tenant":"e2e-shared-a-e47695","userId":"6c2ac55a-ce62-4d63-a1e0-abb4b05795b6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e093e072-d32a-4166-a350-4bd123cd3633","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/sub-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e093e072-d32a-4166-a350-4bd123cd3633","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0d98e5"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e093e072-d32a-4166-a350-4bd123cd3633","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e093e072-d32a-4166-a350-4bd123cd3633","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37040","PortSpecifier":{"PortValue":37040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fe4e80a-042d-4774-90f6-796a6a7454de","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37040","PortSpecifier":{"PortValue":37040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342814,"nanos":478661417},"http":{"id":"4fe4e80a-042d-4774-90f6-796a6a7454de","method":"GET","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UcBQLFuXplZHn3Sb_3hAROe0kpWbakKbt4mCKNKrtn4O1AWRglRgsMHjhVDd"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UcBQLFuXplZHn3Sb_3hAROe0kpWbakKbt4mCKNKrtn4O1AWRglRgsMHjhVDd\"}"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"29882e9a-d90d-4c4e-9867-7d9277aba783","keyName":"e2e-sub-iso-d73cb2","subscription":"e2e-b-only-0d98e5","tenant":"e2e-shared-b-984f35","userId":"29882e9a-d90d-4c4e-9867-7d9277aba783","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/sub-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0d98e5"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fe4e80a-042d-4774-90f6-796a6a7454de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50870","PortSpecifier":{"PortValue":50870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96649e77-6781-47da-bf55-22fa9d0a6f37","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50870","PortSpecifier":{"PortValue":50870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342826,"nanos":650945228},"http":{"id":"96649e77-6781-47da-bf55-22fa9d0a6f37","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/sub-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96649e77-6781-47da-bf55-22fa9d0a6f37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342826,"nanos":686803034},"http":{"id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/sub-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d4a3ee-35fb-4ebd-a70c-28d10ef72ab2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44014","PortSpecifier":{"PortValue":44014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44014","PortSpecifier":{"PortValue":44014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342826,"nanos":721718947},"http":{"id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SFiBJVV50jkSSigX_UdxQ403naXGXlFo5K1tRGx20DSj3a1bYbwQjVvU2wUa"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SFiBJVV50jkSSigX_UdxQ403naXGXlFo5K1tRGx20DSj3a1bYbwQjVvU2wUa\"}"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bc68c90b-432c-4dc4-951e-9406b959f5c0","keyName":"e2e-sub-iso-2b0c34","subscription":"e2e-shared-sub-e70faa","tenant":"e2e-shared-a-e47695","userId":"bc68c90b-432c-4dc4-951e-9406b959f5c0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/sub-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e70faa"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"249ddc6d-814b-4d08-a457-ac5eab8aa66a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58304","PortSpecifier":{"PortValue":58304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58304","PortSpecifier":{"PortValue":58304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342826,"nanos":747771019},"http":{"id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wbc164UbVVG8hhVn_djuyOf0PLtVaxCX6MKVRbn8PI3yyWVaAhUKkUrvh9XE"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wbc164UbVVG8hhVn_djuyOf0PLtVaxCX6MKVRbn8PI3yyWVaAhUKkUrvh9XE\"}"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3223a6f-94d2-41e7-baee-4aea8e7966ce","keyName":"e2e-sub-iso-e513ba","subscription":"e2e-shared-sub-e70faa","tenant":"e2e-shared-b-984f35","userId":"a3223a6f-94d2-41e7-baee-4aea8e7966ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/sub-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e70faa"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d639ee-507b-44f2-bbd8-6d9f0367c325","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:00:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b15b2a27e95295bbf506a6221797193d0fa7577ed3458a127305bfe4aa2962a"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7729683d18f29d5ad0126a38f2f53e19cf96f04bff6af2c76562767e09ad3f64"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/815f85f60f2a165987e59b4b723e109c44352742f1ddc7ee43e2d48de1455338"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37b0b1e54c87787f3af3e2645dce18de3c3b1dd5c488e92d2ce46e447ea42192"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/376cf4f5a025c80ac5ee068294e2e7efb45c6ddd310b3e3ff895ccd80fe2aad5"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeb37fc231e54bbe847085ff2b5672000991563ecff9cda3699e66ba055fd6ea"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e59fd49df52d42638cfa0c0f79d025c17eca7b26ef0affe8da7e69b99a3e18c"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/261f178c8a4922b739e24705dad7bcf50fbc80d757a412085dbbac9aa1beb1d1"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/097ddc7418a74b895486d91a962e008f4d4ee58b6dc2efc82b731e3b2a13a556"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6d7ec5e37c6deb67d46003381eadfd34bd6a3501a1fddaabed57c9acf68dc18"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6475f5cbda1e0921efefb638bed6d2e749a4e1b3986016fae7a33183fc5a9fb5"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00c0c93739ed32b65799b251211a4b71033a26f87fd7c5d8f0530686971adacf"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4594df0819fb36cbdecfef42d6e35d659f70d54f0e894a73aa2b980d7c1a50cd"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25ea6b282ed9f7ec115c250eee739db62b52791cec9346d03fdfb9b8fa8248fb"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9b1fb943c879900e91a6a16d7c8614c4f71c5d64bb0dadf454fda9f0907e360"}
{"level":"info","ts":"2026-07-06T13:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22fd7304c48aa30adbcf54e51628248d7ed0db41fd68a60077de21fa42295d6c"}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"error","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5"}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5"}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5"}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438"}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"}
{"level":"debug","ts":"2026-07-06T13:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"debug","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T13:01:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"}
{"level":"debug","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5"}
{"level":"debug","ts":"2026-07-06T13:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T13:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db"}
{"level":"info","ts":"2026-07-06T13:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438"}
{"level":"info","ts":"2026-07-06T13:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49922","PortSpecifier":{"PortValue":49922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49922","PortSpecifier":{"PortValue":49922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342918,"nanos":131297660},"http":{"id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18dd0a1c-47a5-41b4-85e3-6b5b41328400","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bd3fef7-d497-4e04-b503-028064df798c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52594","PortSpecifier":{"PortValue":52594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bd3fef7-d497-4e04-b503-028064df798c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bd3fef7-d497-4e04-b503-028064df798c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52594","PortSpecifier":{"PortValue":52594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342918,"nanos":171235545},"http":{"id":"3bd3fef7-d497-4e04-b503-028064df798c","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3bd3fef7-d497-4e04-b503-028064df798c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bd3fef7-d497-4e04-b503-028064df798c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bd3fef7-d497-4e04-b503-028064df798c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd3fef7-d497-4e04-b503-028064df798c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd3fef7-d497-4e04-b503-028064df798c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd3fef7-d497-4e04-b503-028064df798c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/rate-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3bd3fef7-d497-4e04-b503-028064df798c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bd3fef7-d497-4e04-b503-028064df798c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bd3fef7-d497-4e04-b503-028064df798c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bd3fef7-d497-4e04-b503-028064df798c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bd3fef7-d497-4e04-b503-028064df798c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49932","PortSpecifier":{"PortValue":49932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95e3b50d-ac64-4684-85e4-e27c153643f2","method":"POST","path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49932","PortSpecifier":{"PortValue":49932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342918,"nanos":215400483},"http":{"id":"95e3b50d-ac64-4684-85e4-e27c153643f2","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YCzbs2O1qpiuWabC_iIGyCy69dn6dDqNfWPyS4HUadMCNh9dOAp7fDxO3rpi"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YCzbs2O1qpiuWabC_iIGyCy69dn6dDqNfWPyS4HUadMCNh9dOAp7fDxO3rpi\"}"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64b72e28-224e-47a3-a332-921ae0d08e29","keyName":"e2e-rate-a-0637cf","subscription":"e2e-rate-iso-a-0637cf","tenant":"e2e-shared-a-e47695","userId":"64b72e28-224e-47a3-a332-921ae0d08e29","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\",\"requestedSubscription\":\"e2e-rate-iso-a-0637cf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0637cf","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0637cf"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64b72e28-224e-47a3-a332-921ae0d08e29","keyName":"e2e-rate-a-0637cf","selected_subscription":"e2e-rate-iso-a-0637cf","selected_subscription_key":"ai-tenant-e2e-shared-a-e47695/e2e-rate-iso-a-0637cf@ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0637cf","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95e3b50d-ac64-4684-85e4-e27c153643f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","method":"POST","path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342919,"nanos":276493221},"http":{"id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YCzbs2O1qpiuWabC_iIGyCy69dn6dDqNfWPyS4HUadMCNh9dOAp7fDxO3rpi"}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YCzbs2O1qpiuWabC_iIGyCy69dn6dDqNfWPyS4HUadMCNh9dOAp7fDxO3rpi\"}"}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64b72e28-224e-47a3-a332-921ae0d08e29","keyName":"e2e-rate-a-0637cf","subscription":"e2e-rate-iso-a-0637cf","tenant":"e2e-shared-a-e47695","userId":"64b72e28-224e-47a3-a332-921ae0d08e29","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\",\"requestedSubscription\":\"e2e-rate-iso-a-0637cf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0637cf","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0637cf"}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64b72e28-224e-47a3-a332-921ae0d08e29","keyName":"e2e-rate-a-0637cf","selected_subscription":"e2e-rate-iso-a-0637cf","selected_subscription_key":"ai-tenant-e2e-shared-a-e47695/e2e-rate-iso-a-0637cf@ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0637cf","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edc78fbe-3f1f-4358-84fd-7717e4abeeda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d118c38b-fd26-4898-9545-57b39600fe6c","method":"POST","path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342920,"nanos":313014557},"http":{"id":"d118c38b-fd26-4898-9545-57b39600fe6c","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YCzbs2O1qpiuWabC_iIGyCy69dn6dDqNfWPyS4HUadMCNh9dOAp7fDxO3rpi"}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YCzbs2O1qpiuWabC_iIGyCy69dn6dDqNfWPyS4HUadMCNh9dOAp7fDxO3rpi\"}"}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64b72e28-224e-47a3-a332-921ae0d08e29","keyName":"e2e-rate-a-0637cf","subscription":"e2e-rate-iso-a-0637cf","tenant":"e2e-shared-a-e47695","userId":"64b72e28-224e-47a3-a332-921ae0d08e29","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\",\"requestedSubscription\":\"e2e-rate-iso-a-0637cf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0637cf","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0637cf"}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64b72e28-224e-47a3-a332-921ae0d08e29","keyName":"e2e-rate-a-0637cf","selected_subscription":"e2e-rate-iso-a-0637cf","selected_subscription_key":"ai-tenant-e2e-shared-a-e47695/e2e-rate-iso-a-0637cf@ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0637cf","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:02:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d118c38b-fd26-4898-9545-57b39600fe6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52638","PortSpecifier":{"PortValue":52638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef0923fc-7fd5-413e-8704-536468816b5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52638","PortSpecifier":{"PortValue":52638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342933,"nanos":267904748},"http":{"id":"ef0923fc-7fd5-413e-8704-536468816b5b","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef0923fc-7fd5-413e-8704-536468816b5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54338","PortSpecifier":{"PortValue":54338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54338","PortSpecifier":{"PortValue":54338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342933,"nanos":302781301},"http":{"id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"]}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f9ed6f3cf9dc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6b8730c-5f86-4b36-a612-55db4132d5e6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3ec66797-801e-4d88-8bbe-15330fc375d7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/rate-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f9c9ab-d1a8-4b09-8fed-1a12af110907","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52654","PortSpecifier":{"PortValue":52654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","method":"POST","path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52654","PortSpecifier":{"PortValue":52654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342933,"nanos":340145862},"http":{"id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1a2kJVXvAlLl0FSUd_3DViPSQX9AxryxILkZRC7er3IkzkzSXHV9FSE5JItW9"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1a2kJVXvAlLl0FSUd_3DViPSQX9AxryxILkZRC7er3IkzkzSXHV9FSE5JItW9\"}"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd583658-5237-4c01-8846-eaeb7836da80","keyName":"e2e-rate-a-6c560f","subscription":"e2e-rate-iso-a-6c560f","tenant":"e2e-shared-a-e47695","userId":"fd583658-5237-4c01-8846-eaeb7836da80","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\",\"requestedSubscription\":\"e2e-rate-iso-a-6c560f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6c560f","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6c560f"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fd583658-5237-4c01-8846-eaeb7836da80","keyName":"e2e-rate-a-6c560f","selected_subscription":"e2e-rate-iso-a-6c560f","selected_subscription_key":"ai-tenant-e2e-shared-a-e47695/e2e-rate-iso-a-6c560f@ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6c560f","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:02:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1d31be3-d17e-44b8-902a-5e844b02d83f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52658","PortSpecifier":{"PortValue":52658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b44c16c7-f27f-433d-8245-6de5764b40a3","method":"POST","path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52658","PortSpecifier":{"PortValue":52658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342934,"nanos":377946653},"http":{"id":"b44c16c7-f27f-433d-8245-6de5764b40a3","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1a2kJVXvAlLl0FSUd_3DViPSQX9AxryxILkZRC7er3IkzkzSXHV9FSE5JItW9"}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1a2kJVXvAlLl0FSUd_3DViPSQX9AxryxILkZRC7er3IkzkzSXHV9FSE5JItW9\"}"}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd583658-5237-4c01-8846-eaeb7836da80","keyName":"e2e-rate-a-6c560f","subscription":"e2e-rate-iso-a-6c560f","tenant":"e2e-shared-a-e47695","userId":"fd583658-5237-4c01-8846-eaeb7836da80","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\",\"requestedSubscription\":\"e2e-rate-iso-a-6c560f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6c560f","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6c560f"}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fd583658-5237-4c01-8846-eaeb7836da80","keyName":"e2e-rate-a-6c560f","selected_subscription":"e2e-rate-iso-a-6c560f","selected_subscription_key":"ai-tenant-e2e-shared-a-e47695/e2e-rate-iso-a-6c560f@ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6c560f","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:02:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b44c16c7-f27f-433d-8245-6de5764b40a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52666","PortSpecifier":{"PortValue":52666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14646cb4-36bf-4979-b829-f9222be1dd6f","method":"POST","path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions","host":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52666","PortSpecifier":{"PortValue":52666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342935,"nanos":412209747},"http":{"id":"14646cb4-36bf-4979-b829-f9222be1dd6f","method":"POST","headers":{":authority":"e2e-shared-a-e47695.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1a2kJVXvAlLl0FSUd_3DViPSQX9AxryxILkZRC7er3IkzkzSXHV9FSE5JItW9"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1a2kJVXvAlLl0FSUd_3DViPSQX9AxryxILkZRC7er3IkzkzSXHV9FSE5JItW9\"}"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd583658-5237-4c01-8846-eaeb7836da80","keyName":"e2e-rate-a-6c560f","subscription":"e2e-rate-iso-a-6c560f","tenant":"e2e-shared-a-e47695","userId":"fd583658-5237-4c01-8846-eaeb7836da80","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\",\"requestedSubscription\":\"e2e-rate-iso-a-6c560f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e47695.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6c560f","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6c560f"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fd583658-5237-4c01-8846-eaeb7836da80","keyName":"e2e-rate-a-6c560f","selected_subscription":"e2e-rate-iso-a-6c560f","selected_subscription_key":"ai-tenant-e2e-shared-a-e47695/e2e-rate-iso-a-6c560f@ai-tenant-e2e-shared-a-e47695/rate-test-model-e47695","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e47695","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6c560f","namespace":"ai-tenant-e2e-shared-a-e47695","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14646cb4-36bf-4979-b829-f9222be1dd6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","method":"POST","path":"/ai-tenant-e2e-shared-b-984f35/rate-test-model-984f35/v1/completions","host":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54346","PortSpecifier":{"PortValue":54346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783342935,"nanos":445453527},"http":{"id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","method":"POST","headers":{":authority":"e2e-shared-b-984f35.apps.747218aa-8c94-44ba-a642-f9ed6f3cf9dc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-984f35/rate-test-model-984f35/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fhDyUNg7J6jRgRLa_vWD3wAWtuEgMAEsbRS4b8fiOjLDugmkEdp9oWhKAdw3"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fhDyUNg7J6jRgRLa_vWD3wAWtuEgMAEsbRS4b8fiOjLDugmkEdp9oWhKAdw3\"}"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"956f6849-d1b8-448c-b1e6-ccbe8279b00b","keyName":"e2e-rate-b-6c560f","subscription":"e2e-rate-iso-b-6c560f","tenant":"e2e-shared-b-984f35","userId":"956f6849-d1b8-448c-b1e6-ccbe8279b00b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-984f35/rate-test-model-984f35\",\"requestedSubscription\":\"e2e-rate-iso-b-6c560f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-984f35.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-984f35","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6c560f","namespace":"ai-tenant-e2e-shared-b-984f35","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-984f35/rate-test-model-984f35\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6c560f"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"956f6849-d1b8-448c-b1e6-ccbe8279b00b","keyName":"e2e-rate-b-6c560f","selected_subscription":"e2e-rate-iso-b-6c560f","selected_subscription_key":"ai-tenant-e2e-shared-b-984f35/e2e-rate-iso-b-6c560f@ai-tenant-e2e-shared-b-984f35/rate-test-model-984f35","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-984f35","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6c560f","namespace":"ai-tenant-e2e-shared-b-984f35","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T13:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91c6f544-37f8-4153-bdd5-f96bb76a589c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d7cd0a652a7011832b3d5bef42ed679ae63aa27307fde70046dab4cb13ce591"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61b49a7c796f427fd5fd9a26b3634e1fa8d3ff3e6141daec48d075b9e976c844"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91fd3f07303c9acf4e38dcd9db6d1f9fa0a3fda7e0e01b7cb179a868bc85da5f"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/289519dc1847f002b0c17ba3fba5fc868b25b4f7f06d0b50946f2056ef0293a5"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf3c47e75af6605c8cb690891b6d3afc9d9bde5937f440b01bd6dc2c3906eb27"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b0d61e358f5b2c5b91e5c3775225116a9634e278918176e47581186f67d666b"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4d65135233a1c8a1f499e6a05c2ab3096fd411424a632c607b1a026bcca03e3"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d0abd9c91d9bfabd8eaf78c6c4562f039191ce2e11ba39e3ba7cb3f1ca4b8b7"}
{"level":"info","ts":"2026-07-06T13:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23dfb86efd7fa1fe83fc6c527ccc25e6a5bde6e1468513483ae156a2e39c8a2d"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44c0a9318c8a34289721bbca8be3d951b1aeecadb9fc7a13184a07fe28b1c438"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af00bb446f93b9bdcafad5ec4b43662c57fb8417cf7950d9327c97ab475844c4"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29f8c5aa759ccedbd832c3edb93496aebd473165f8e1b3d03262f052ec9eec1f"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f4055a78080cd31d0504a05c23a35c26edfe4a8512f51a33ebf68c0bb0e4c92"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f25a12ec3455d984561630b2821db06022406237f301d428b5051a5dce3ca87d"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e23a60988881fde0f0b00c79a7cfc642d40a104eb11cc37cf3f262ae8ef5001"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8b7907f09fae132a283b73b142414db125ca18f13ed47bbf02104415a1192db"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6e4c7b510c8405a53c983ed4511dba59a70d20483bee814ba3880d0165970d4"}
{"level":"info","ts":"2026-07-06T13:02:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/826184bd76c17f2875c008c5fc799b1847cf4f660254ca8b245cba89d623190c"}
{"level":"info","ts":"2026-07-06T13:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ff8703994a634bb799f85a27f7ba1e6fd0b3ec2231679f8c4accbf5a91bae3c"}
{"level":"info","ts":"2026-07-06T13:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d356e9098bbc1882034f3809654346f82aa2cff9e97459e09891e11e6193be1"}