--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-13T21:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18d7714f12a88966416025633889fe268435453e72ff425075208c3e569ebc8c"}
{"level":"info","ts":"2026-07-13T21:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65a5477580140c7b09b270ffc6dff37bcf00a690adfcf610340dcc256e7bea52"}
{"level":"info","ts":"2026-07-13T21:48:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86626d7a754a3886819a878be7320c677058ce771f7df086ebdad2a6f5ff6ec9"}
{"level":"info","ts":"2026-07-13T21:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fe9d5d6562ade2df2b0c7407caa526cb2f6e55d6dce6eb071220d197a45cee2"}
{"level":"info","ts":"2026-07-13T21:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f7269215b5564d4edda6197256d86c99a960e6d601915c201977284952e42b0"}
{"level":"info","ts":"2026-07-13T21:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7022bd079e4a5e506fd13e81ca3b24d910875b501fe0324b8acdcb9ae1616346"}
{"level":"info","ts":"2026-07-13T21:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a66540b1fecfb65e299fd9d1873c38b399684673d3b49b406a6fb7e0e3effa4"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4"}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621"}
{"level":"debug","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:49:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:49:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"debug","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"error","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"}
{"level":"error","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"error","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73621074fcb6b2e4f94f9f95844ea5a324113e486a7a6729aeb7d5c0b3344dda"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73621074fcb6b2e4f94f9f95844ea5a324113e486a7a6729aeb7d5c0b3344dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73621074fcb6b2e4f94f9f95844ea5a324113e486a7a6729aeb7d5c0b3344dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73621074fcb6b2e4f94f9f95844ea5a324113e486a7a6729aeb7d5c0b3344dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73621074fcb6b2e4f94f9f95844ea5a324113e486a7a6729aeb7d5c0b3344dda"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73621074fcb6b2e4f94f9f95844ea5a324113e486a7a6729aeb7d5c0b3344dda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:50:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"}
{"level":"error","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:50:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42262","PortSpecifier":{"PortValue":42262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"261d55e3-6b3f-4976-8bca-28c750b71800","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42262","PortSpecifier":{"PortValue":42262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979408,"nanos":755275329},"http":{"id":"261d55e3-6b3f-4976-8bca-28c750b71800","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"261d55e3-6b3f-4976-8bca-28c750b71800","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979408,"nanos":822906862},"http":{"id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3187a2c9-453c-4e89-8b09-9f08579ad66f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42274","PortSpecifier":{"PortValue":42274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","method":"GET","path":"/maas-api/v1/api-keys/c06b1930-b404-4bba-bc76-658efe231c0c","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42274","PortSpecifier":{"PortValue":42274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979408,"nanos":883981360},"http":{"id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","method":"GET","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c06b1930-b404-4bba-bc76-658efe231c0c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c06b1930-b404-4bba-bc76-658efe231c0c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c46e4673-937d-4d0f-a290-a76ec0dc2275","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","method":"GET","path":"/maas-api/v1/api-keys/3f7db651-f702-4821-bc65-d06d40317f01","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979408,"nanos":921397560},"http":{"id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","method":"GET","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3f7db651-f702-4821-bc65-d06d40317f01",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3f7db651-f702-4821-bc65-d06d40317f01",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d752cb4a-6bc5-4896-abd5-bacc571ebfce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42632","PortSpecifier":{"PortValue":42632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42632","PortSpecifier":{"PortValue":42632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979426,"nanos":71569358},"http":{"id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06d3e9d4-eb7a-4af2-90c0-cbb775ef064d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53246","PortSpecifier":{"PortValue":53246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13741098-c94b-488d-9e58-e633f7a9ca5d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53246","PortSpecifier":{"PortValue":53246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979426,"nanos":109200243},"http":{"id":"13741098-c94b-488d-9e58-e633f7a9ca5d","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13741098-c94b-488d-9e58-e633f7a9ca5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42648","PortSpecifier":{"PortValue":42648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da235959-e8e5-445a-bccb-9bcb38ea650c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42648","PortSpecifier":{"PortValue":42648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979426,"nanos":144088996},"http":{"id":"da235959-e8e5-445a-bccb-9bcb38ea650c","method":"GET","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C8L5ffB0FwZNYEXA_U4VIQj3RIz5M090lp1qeHaqizRMDH0UWYwwR89KQfgt"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C8L5ffB0FwZNYEXA_U4VIQj3RIz5M090lp1qeHaqizRMDH0UWYwwR89KQfgt\"}"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"edf9d31d-1748-4f82-860c-e9cc14dc1df6","keyName":"e2e-auth-iso-a-904d2d","subscription":"e2e-auth-iso-da4adf","tenant":"e2e-shared-a-8139bf","userId":"edf9d31d-1748-4f82-860c-e9cc14dc1df6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-da4adf"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da235959-e8e5-445a-bccb-9bcb38ea650c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53136","PortSpecifier":{"PortValue":53136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53136","PortSpecifier":{"PortValue":53136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979441,"nanos":184726968},"http":{"id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e02ffc79-1171-4635-9c24-c6a00e4b0ae0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cc38254-11d7-4e63-9b04-279074934cae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34210","PortSpecifier":{"PortValue":34210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cc38254-11d7-4e63-9b04-279074934cae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cc38254-11d7-4e63-9b04-279074934cae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34210","PortSpecifier":{"PortValue":34210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979441,"nanos":222761750},"http":{"id":"9cc38254-11d7-4e63-9b04-279074934cae","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cc38254-11d7-4e63-9b04-279074934cae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cc38254-11d7-4e63-9b04-279074934cae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cc38254-11d7-4e63-9b04-279074934cae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc38254-11d7-4e63-9b04-279074934cae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc38254-11d7-4e63-9b04-279074934cae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc38254-11d7-4e63-9b04-279074934cae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cc38254-11d7-4e63-9b04-279074934cae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc38254-11d7-4e63-9b04-279074934cae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc38254-11d7-4e63-9b04-279074934cae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cc38254-11d7-4e63-9b04-279074934cae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cc38254-11d7-4e63-9b04-279074934cae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34222","PortSpecifier":{"PortValue":34222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34222","PortSpecifier":{"PortValue":34222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979441,"nanos":261870190},"http":{"id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","method":"GET","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15PQprw7WCvqpTpZq_eWhd3hE1lZeaL2tG8LHLMCd9hU0wHFU5UigCcUlbCPx"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15PQprw7WCvqpTpZq_eWhd3hE1lZeaL2tG8LHLMCd9hU0wHFU5UigCcUlbCPx\"}"}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T21:50:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5128dbf7-33cb-496c-a47d-ded7efe8e93b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b280612-6420-4932-bcef-f6a5744381c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49958","PortSpecifier":{"PortValue":49958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b280612-6420-4932-bcef-f6a5744381c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b280612-6420-4932-bcef-f6a5744381c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49958","PortSpecifier":{"PortValue":49958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979462,"nanos":711329587},"http":{"id":"1b280612-6420-4932-bcef-f6a5744381c8","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b280612-6420-4932-bcef-f6a5744381c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b280612-6420-4932-bcef-f6a5744381c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b280612-6420-4932-bcef-f6a5744381c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b280612-6420-4932-bcef-f6a5744381c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b280612-6420-4932-bcef-f6a5744381c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b280612-6420-4932-bcef-f6a5744381c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b280612-6420-4932-bcef-f6a5744381c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b280612-6420-4932-bcef-f6a5744381c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b280612-6420-4932-bcef-f6a5744381c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b280612-6420-4932-bcef-f6a5744381c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b280612-6420-4932-bcef-f6a5744381c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40566","PortSpecifier":{"PortValue":40566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40566","PortSpecifier":{"PortValue":40566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979462,"nanos":755279428},"http":{"id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267bf65a-268a-4bc2-9707-4b8bd8e4df52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979462,"nanos":797827588},"http":{"id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6ff55f1-0ac5-4d63-a793-dba6de13edaa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df83d89a-182d-41fc-ae93-75cac638df71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40572","PortSpecifier":{"PortValue":40572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df83d89a-182d-41fc-ae93-75cac638df71","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df83d89a-182d-41fc-ae93-75cac638df71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40572","PortSpecifier":{"PortValue":40572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979462,"nanos":833741342},"http":{"id":"df83d89a-182d-41fc-ae93-75cac638df71","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df83d89a-182d-41fc-ae93-75cac638df71","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df83d89a-182d-41fc-ae93-75cac638df71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df83d89a-182d-41fc-ae93-75cac638df71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df83d89a-182d-41fc-ae93-75cac638df71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df83d89a-182d-41fc-ae93-75cac638df71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df83d89a-182d-41fc-ae93-75cac638df71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df83d89a-182d-41fc-ae93-75cac638df71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df83d89a-182d-41fc-ae93-75cac638df71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df83d89a-182d-41fc-ae93-75cac638df71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df83d89a-182d-41fc-ae93-75cac638df71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df83d89a-182d-41fc-ae93-75cac638df71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37778","PortSpecifier":{"PortValue":37778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37778","PortSpecifier":{"PortValue":37778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979479,"nanos":965783168},"http":{"id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8668ef18-c87b-40f9-8546-65e2b3c90bd3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53194","PortSpecifier":{"PortValue":53194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53194","PortSpecifier":{"PortValue":53194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979480,"nanos":4387854},"http":{"id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8951410d-7b01-4a70-a1aa-a1ff1e5c8484","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53206","PortSpecifier":{"PortValue":53206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cac1bb35-f618-4892-8aad-91379d2b6dca","method":"GET","path":"/maas-api/v1/api-keys/e24d9954-7a3e-4dec-9a19-e790fbfc894c","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53206","PortSpecifier":{"PortValue":53206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979480,"nanos":43525982},"http":{"id":"cac1bb35-f618-4892-8aad-91379d2b6dca","method":"GET","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e24d9954-7a3e-4dec-9a19-e790fbfc894c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e24d9954-7a3e-4dec-9a19-e790fbfc894c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cac1bb35-f618-4892-8aad-91379d2b6dca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37792","PortSpecifier":{"PortValue":37792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec076df8-fa51-4f91-9966-f802a214fcdb","method":"GET","path":"/maas-api/v1/api-keys/e24d9954-7a3e-4dec-9a19-e790fbfc894c","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37792","PortSpecifier":{"PortValue":37792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979480,"nanos":77892576},"http":{"id":"ec076df8-fa51-4f91-9966-f802a214fcdb","method":"GET","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e24d9954-7a3e-4dec-9a19-e790fbfc894c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e24d9954-7a3e-4dec-9a19-e790fbfc894c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec076df8-fa51-4f91-9966-f802a214fcdb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53314","PortSpecifier":{"PortValue":53314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53314","PortSpecifier":{"PortValue":53314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979499,"nanos":301419885},"http":{"id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c6af3de-2354-484d-afa6-09d7a5f7d729","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51806","PortSpecifier":{"PortValue":51806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51806","PortSpecifier":{"PortValue":51806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979499,"nanos":346263985},"http":{"id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/auth-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4772c6c1-f1f1-4798-bb3e-d7225159df4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53324","PortSpecifier":{"PortValue":53324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53324","PortSpecifier":{"PortValue":53324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979499,"nanos":385420267},"http":{"id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Bw8JlFGUlsJTNdAs_pNQCgP6O3u2rpskHD5pJcWuKnSG50qT32hkaIfFxJMS"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Bw8JlFGUlsJTNdAs_pNQCgP6O3u2rpskHD5pJcWuKnSG50qT32hkaIfFxJMS\"}"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48141966-aca9-48c1-8b8c-ebb1bdad6824","keyName":"e2e-auth-iso-a-b1fa4b","subscription":"e2e-auth-iso-dc934b","tenant":"e2e-shared-a-8139bf","userId":"48141966-aca9-48c1-8b8c-ebb1bdad6824","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/auth-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-dc934b"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:51:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae29a8a-70d6-40f0-89bf-a0cb1fcae6c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3d809a1106f9c47b13d0ebcd42e2b2b260352f5b0d4cc47430337bba9716956"}
{"level":"info","ts":"2026-07-13T21:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07e402e3999a4f5ae8ac84829e1271f8520aa605ce05dbe6af1839326d98b13"}
{"level":"info","ts":"2026-07-13T21:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e38cd3c0bc70e6902d3b4fb7c4c29361b1ac20b228e15e246b9f35014b5ba7e4"}
{"level":"info","ts":"2026-07-13T21:51:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa8f8ac635c977fe49b88c6281b73872673b80332a5b7ce88c182193f6c152f"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e56e5edacc7fea0908067eecc9c357b4e449310d8b217fdb52c1e5b3c2b2cf1d"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c8ded43f1b80930ed8e108bdcfb98e4a768d59a519a992ad2b1feefe40629aa"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/293de472de757f9b16abe5c19738be4bf513010e2c2e764ab12ad308146177b4"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94e2c12107f5ffb526f33aee75cd7b9f8466e64c0acf9c5a7f46599a4b978205"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/385b598337151c8034293c78a7cfc2f5fa056e06401b5176edf3fae2274aebbb"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73621074fcb6b2e4f94f9f95844ea5a324113e486a7a6729aeb7d5c0b3344dda"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18dd923bcd346a627b99ed2e949ef031dbd169e13c5b6f27a9665d44cb4d2c18"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f20d3308664093e00adf8a36f5c8a925c5ce5eb431c13ba7f4216f06c0dab621"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/285bb4f09f7afb2f27c958232360aafab6136c7b0ea1757ee480d41765224b8b"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/373b59771269ac7a08642733d06268063f6437479a9f46d52cfeeebff6e60ccb"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af98cc3eba172230fc66d98e2af1d72f9a5afac56c73156cf51294db3dff2adc"}
{"level":"info","ts":"2026-07-13T21:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0563eaeaadef1ae7d33db6259cca987e16bec6215dd4d01c919f57f44c14f9a"}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"debug","ts":"2026-07-13T21:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"error","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"}
{"level":"error","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529"}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7"}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0"}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7"}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529"}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0"}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7"}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"error","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31"}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129"}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31"}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"error","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550"}
{"level":"debug","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31"}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0"}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7"}
{"level":"info","ts":"2026-07-13T21:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45474","PortSpecifier":{"PortValue":45474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3439d1bc-0099-42c9-892f-c0829b1350b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45474","PortSpecifier":{"PortValue":45474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979546,"nanos":715145381},"http":{"id":"3439d1bc-0099-42c9-892f-c0829b1350b6","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/sub-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3439d1bc-0099-42c9-892f-c0829b1350b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56694","PortSpecifier":{"PortValue":56694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22e8c22d-678c-4fec-b138-89129f6d9491","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56694","PortSpecifier":{"PortValue":56694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979546,"nanos":755993972},"http":{"id":"22e8c22d-678c-4fec-b138-89129f6d9491","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/sub-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e8c22d-678c-4fec-b138-89129f6d9491","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45486","PortSpecifier":{"PortValue":45486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45486","PortSpecifier":{"PortValue":45486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979546,"nanos":793136543},"http":{"id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","method":"GET","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O9zgm7p7UgSlNImw_7A7828cQB8tvYjgRTfgNAoKfzE6XsFjjC8QzLer8AAp"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O9zgm7p7UgSlNImw_7A7828cQB8tvYjgRTfgNAoKfzE6XsFjjC8QzLer8AAp\"}"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9e85fc8-48df-4678-ae30-8e041b4c175a","keyName":"e2e-sub-iso-9a6822","subscription":"e2e-a-only-961c4f","tenant":"e2e-shared-a-8139bf","userId":"b9e85fc8-48df-4678-ae30-8e041b4c175a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/sub-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-961c4f"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593e75d3-0420-44ce-b1c0-3bf58e972b52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56708","PortSpecifier":{"PortValue":56708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56708","PortSpecifier":{"PortValue":56708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979546,"nanos":822953099},"http":{"id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","method":"GET","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xmzsumGKhd8znhch_Qt2zronfXv4Jg0op8lPplO1Cs9epfzjaRu7Cv8rrIgy"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xmzsumGKhd8znhch_Qt2zronfXv4Jg0op8lPplO1Cs9epfzjaRu7Cv8rrIgy\"}"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ad651e9-5957-4dd8-a0b7-226bb417a717","keyName":"e2e-sub-iso-3217c1","subscription":"e2e-b-only-961c4f","tenant":"e2e-shared-b-6c68d6","userId":"2ad651e9-5957-4dd8-a0b7-226bb417a717","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/sub-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-961c4f"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d975b0e1-5efc-4a2d-adaa-4b2e030809b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52468","PortSpecifier":{"PortValue":52468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52468","PortSpecifier":{"PortValue":52468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979565,"nanos":347451472},"http":{"id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/sub-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"715e18ca-0b01-4c4e-aaf8-63aba3597082","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55094","PortSpecifier":{"PortValue":55094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55094","PortSpecifier":{"PortValue":55094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979565,"nanos":386122377},"http":{"id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/sub-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a8416f7-5251-4052-81b7-de57aedfa7a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979565,"nanos":422706881},"http":{"id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vuoyxZx4xHygklz_ScZfUfdx4lYvLxQLUJzM7n2EHs6spickUdeNV0uoELD"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vuoyxZx4xHygklz_ScZfUfdx4lYvLxQLUJzM7n2EHs6spickUdeNV0uoELD\"}"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0a2e118c-8d39-41ee-b56f-020d825f9bb5","keyName":"e2e-sub-iso-e1b1c2","subscription":"e2e-shared-sub-56a59b","tenant":"e2e-shared-a-8139bf","userId":"0a2e118c-8d39-41ee-b56f-020d825f9bb5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/sub-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-56a59b"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea836ddd-f18f-4b51-9c51-4d67bf7f8981","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55096","PortSpecifier":{"PortValue":55096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5630a5dc-726b-49d6-887c-83008a4fd46e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55096","PortSpecifier":{"PortValue":55096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979565,"nanos":453823283},"http":{"id":"5630a5dc-726b-49d6-887c-83008a4fd46e","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X0SuaZCUFIRz4OwG_t7sUSvAiQKRh0Qj2TPvfuuKzrisrGmaM4GIGUQ1Ipin"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X0SuaZCUFIRz4OwG_t7sUSvAiQKRh0Qj2TPvfuuKzrisrGmaM4GIGUQ1Ipin\"}"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0dd22be-a9f6-41ba-96ca-b88baed215a8","keyName":"e2e-sub-iso-92c5ab","subscription":"e2e-shared-sub-56a59b","tenant":"e2e-shared-b-6c68d6","userId":"a0dd22be-a9f6-41ba-96ca-b88baed215a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/sub-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-56a59b"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5630a5dc-726b-49d6-887c-83008a4fd46e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f06f43b7d67e51ec46218ca9c5e7e59f5461c0a5e5c49b3812ac330f8b5f529"}
{"level":"info","ts":"2026-07-13T21:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe22393699c47a6ea007fc1278a53e513dd476eeaa5eda36fee8b67920e121a5"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/884707f76dcc8e8baaa57c06c05fa26b045d066b36d973e643b5dd0093390079"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f915a93d83b47282a12587b2f1836b5dfe9506a1c8d983398a4191a5d5bc6b1"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/208d8ea1bd29a2d200e1d6cc5b4bafc8727199e9ad82a993f4b12865f6eeedc8"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73ee19125add3ca45e50b7f177209d848b1af3fdb471e737506fb47ad15ab08e"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a133ea40a2e46f1bd269d745b747249da21c1c446d101ff6f26890d51fc4129"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712bc7f70f5f42d1c21fc1b11be8280f7143b7b6549a741ce2167cdd21ceba31"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35d855681fa548854f41e0ba7ee0172685f16041bd2d5a1c29f814f1df7349f0"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d203115f403ae59af88a7239c166f3d79b359707bd47bb19a02b72f12ad1aac0"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb0c7c243eaf7ca4b4855f1ac4083b45751fe88fcb00dcb75bb96d5efbb248ab"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ceff728d58139386e9dfee4b6f94b39df2dbf18e29b27417798a243340d3f61"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c49938554c83fdeff2dab02b4478be68c4932fa81440c0648f7306b9646bb550"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18630a9e5858a1b9aa9b58d444e7dbd941ff394063a2aae4165ba63568a7f449"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d7bc469a722302e341d7e6b5ec57a1dcfe16e5fb36d1df912adf453105cad7"}
{"level":"info","ts":"2026-07-13T21:52:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b100f17557a3befc8bee61af09d58356f2fdb5dbdfb5288f69bcf21f0f6d903a"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:52:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:52:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"info","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46410","PortSpecifier":{"PortValue":46410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46410","PortSpecifier":{"PortValue":46410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979630,"nanos":866361925},"http":{"id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50136","PortSpecifier":{"PortValue":50136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b1da0ff-f194-45e0-a6ae-88548697927b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50136","PortSpecifier":{"PortValue":50136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979630,"nanos":906541919},"http":{"id":"1b1da0ff-f194-45e0-a6ae-88548697927b","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46422","PortSpecifier":{"PortValue":46422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46422","PortSpecifier":{"PortValue":46422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979630,"nanos":946933496},"http":{"id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S\"}"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","subscription":"e2e-rate-iso-a-d3faf9","tenant":"e2e-shared-a-8139bf","userId":"d010d1fb-fcec-4147-8d42-ed349baf2904","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d3faf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3faf9"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","selected_subscription":"e2e-rate-iso-a-d3faf9","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d3faf9@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979632,"nanos":10413534},"http":{"id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S\"}"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","subscription":"e2e-rate-iso-a-d3faf9","tenant":"e2e-shared-a-8139bf","userId":"d010d1fb-fcec-4147-8d42-ed349baf2904","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d3faf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3faf9"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","selected_subscription":"e2e-rate-iso-a-d3faf9","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d3faf9@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46450","PortSpecifier":{"PortValue":46450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a84e229b-4152-4b12-9202-900c5caedab0","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46450","PortSpecifier":{"PortValue":46450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979633,"nanos":50419597},"http":{"id":"a84e229b-4152-4b12-9202-900c5caedab0","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S\"}"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","subscription":"e2e-rate-iso-a-d3faf9","tenant":"e2e-shared-a-8139bf","userId":"d010d1fb-fcec-4147-8d42-ed349baf2904","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d3faf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a84e229b-4152-4b12-9202-900c5caedab0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3faf9"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","selected_subscription":"e2e-rate-iso-a-d3faf9","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d3faf9@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a84e229b-4152-4b12-9202-900c5caedab0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a84e229b-4152-4b12-9202-900c5caedab0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52178","PortSpecifier":{"PortValue":52178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16c9337a-4560-4222-bcdf-78917d36b8f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52178","PortSpecifier":{"PortValue":52178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979643,"nanos":845371411},"http":{"id":"16c9337a-4560-4222-bcdf-78917d36b8f2","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50622","PortSpecifier":{"PortValue":50622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c050b729-0c70-4292-9e96-ec4d863410eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50622","PortSpecifier":{"PortValue":50622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979643,"nanos":887821614},"http":{"id":"c050b729-0c70-4292-9e96-ec4d863410eb","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52190","PortSpecifier":{"PortValue":52190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52190","PortSpecifier":{"PortValue":52190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979643,"nanos":922892217},"http":{"id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI\"}"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","subscription":"e2e-rate-iso-a-d41061","tenant":"e2e-shared-a-8139bf","userId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","selected_subscription":"e2e-rate-iso-a-d41061","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d41061@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49944","PortSpecifier":{"PortValue":49944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a59abe48-9ea4-4d63-952c-db09763e7e90","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49944","PortSpecifier":{"PortValue":49944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979644,"nanos":976483472},"http":{"id":"a59abe48-9ea4-4d63-952c-db09763e7e90","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI\"}"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","subscription":"e2e-rate-iso-a-d41061","tenant":"e2e-shared-a-8139bf","userId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","selected_subscription":"e2e-rate-iso-a-d41061","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d41061@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979646,"nanos":16222611},"http":{"id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","subscription":"e2e-rate-iso-a-d41061","tenant":"e2e-shared-a-8139bf","userId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","selected_subscription":"e2e-rate-iso-a-d41061","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d41061@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38554","PortSpecifier":{"PortValue":38554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","method":"POST","path":"/ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6/v1/completions","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38554","PortSpecifier":{"PortValue":38554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979646,"nanos":55278463},"http":{"id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EQIddBpWL01YplrI_pNYUTcltd2tTLWWBQwH1ZmzjaS13CpcI3c6mA8Pk0YE"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EQIddBpWL01YplrI_pNYUTcltd2tTLWWBQwH1ZmzjaS13CpcI3c6mA8Pk0YE\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db0567d0-7a89-497c-b91f-442bbf1038d3","keyName":"e2e-rate-b-d41061","subscription":"e2e-rate-iso-b-d41061","tenant":"e2e-shared-b-6c68d6","userId":"db0567d0-7a89-497c-b91f-442bbf1038d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\",\"requestedSubscription\":\"e2e-rate-iso-b-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6c68d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d41061","namespace":"ai-tenant-e2e-shared-b-6c68d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"db0567d0-7a89-497c-b91f-442bbf1038d3","keyName":"e2e-rate-b-d41061","selected_subscription":"e2e-rate-iso-b-d41061","selected_subscription_key":"ai-tenant-e2e-shared-b-6c68d6/e2e-rate-iso-b-d41061@ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6c68d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d41061","namespace":"ai-tenant-e2e-shared-b-6c68d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}